ClickFix on Steam forums: how malicious PowerShell commands install a crypto miner | Kaspersky official blog
Brief
This year has seen a real boom in ClickFix attacks . It’s such a hit with criminals that we barely finish writing about one variation before it’s time to cover the next.
This time, attackers are targeting gamers: tech journalists spotted posts pushing malicious tips on Steam forums. Here’s what these posts look like, what malware they’re used to spread, and how to keep your device safe.
ClickFix finds its way onto Steam forums
Many gamers turn to their fellow players on Steam forums for help and advice on things like beating a tricky quest, leveling up, scoring the best loot, or working around a bug. And it’s precisely this trust in community advice that attackers have decided to exploit.
The attack starts when criminals reply to someone’s question about game crashes, missing inventory items, or other technical issues.