What happened during the Meccha Chameleon hack?

Meccha Chameleon has built its reputation around colourful camouflage, silly poses and players desperately pretending to be part of the scenery. However, the cheerful hide-and-seek game recently faced a much more serious kind of hiding problem after malicious mod maps, malware and a hacked Discord server created plenty of confusion across its community.

Malicious mod maps trigger a serious security scare

According to the developer’s official Steam announcements, the trouble began with a malicious MOD map issue. Update 3.1.0, released on July 25, introduced a security patch for mod maps alongside several normal improvements. The following 3.2.0 update explained that the previous patch had made it impossible for mod maps to execute unrelated files such as malware, adding that the result had been confirmed with Steam Support.

Things became even messier while the team investigated the vulnerability. The developer said a system engineer’s spare testing PC became infected with malware during the investigation. The attacker then bypassed the engineer’s Discord two-factor authentication, took control of the official server’s permissions and banned the game’s staff members, temporarily locking the team out of its own community.

Naturally, that sent the rumour machine into overdrive. While controlling the Discord server, the attacker reportedly claimed that the latest official game update contained a Remote Access Trojan and instructed players to follow certain steps to remove it. The developers strongly denied this, stating that the game itself remained virus-free and that the Discord server was not connected to the game. They also said the infected testing PC could not access or edit the game’s source files, something the team rechecked through its logs before wiping and reformatting the machine.

Thankfully, the crisis did not last long. On July 26, the developers announced that the official Discord server had been restored and that the attackers had been banned. Regular development also continued, with update 3.3.0 adding the new “Plump” character body type.

It was a scary detour for Meccha Chameleon that normally focuses on artistic camouflage and chaotic multiplayer laughs, but the official timeline offers some reassurance. The vulnerability was patched, the compromised testing machine was erased, the Discord server was recovered and the developers repeatedly stressed that the official Steam game was not infected. For players returning to paint themselves into walls, that is a much happier ending than the hacker probably wanted.

Ready to join the colourful chaos? Use our price comparison tool to find the best prices for Meccha Chameleon and start blending into the battlefield for less.