PSA: Don't execute PowerShell commands proffered by Steam forum randos, because it could infect your rig with a…

Threat actors are exploiting Steam forums to trick users into downloading cryptominers onto their PCs. Attackers pose as helpful users, providing fake PowerShell commands that, when executed with administrator privileges, disable security measures and install the XMRig cryptominer. This social engineering tactic, dubbed ClickFix, is particularly dangerous for new Linux users who may be accustomed to running scripts from untrusted sources.

• Entities
• Company: Microsoft
• Topic: Malware
• Topic: Cybersecurity
• Company: Steam
• Platform: PC
• Platform: Linux
• Platform: Windows