Kurzfassung
Cybercriminals are hijacking Steam discussion forums with ClickFix attacks, posting fake troubleshooting tips that trick gamers into running malicious PowerShell commands. These commands silently install XMRig cryptominers that hijack...
Wie es funktioniert
Cybercriminals are hijacking Steam discussion forums with ClickFix attacks, posting fake troubleshooting tips that trick gamers into running malicious PowerShell commands. These commands silently install XMRig cryptominers that hijack...
Warnzeichen
- : Unsolicited "fix" instructions asking you to open PowerShell as Administrator and paste unknown commands Claims of running many optimizations (SFC, DISM, DNS flush, malware scan) with visible progress bars but no real effect Sudden system slowdowns, high CPU usage, or unfamiliar processes named xmrig running in the background
Was tun
- 1: Never run PowerShell commands copied from forum posts, chats, or unverified users Check for the directory C:\Windows\Background and a scheduled task named XMRig <your pc name Run a full antivirus scan, remove suspicious Microsoft Defender exclusions, and delete any detected miner files
Quelle
bleepingcomputer
Quelle geprueft vom Mythos Forensic Team
https://www.bleepingcomputer.com/news/security/steam-forum-clickfix-attacks-infect-gamers-with-xmrig-cryptominers/FAQ
Ist Steam Forum ClickFix Attacks Push XMRig Cryptominers via Fake Fixes ein reales Betrugsmuster?
Ja. Behandeln Sie Nachricht, Anruf oder Zahlungsaufforderung als verdaechtig, bis ein offizieller Kanal sie bestaetigt.
Was sind die ersten Warnzeichen?
: Unsolicited "fix" instructions asking you to open PowerShell as Administrator and paste unknown commands Claims of running many optimizations (SFC, DISM, DNS flush, malware scan) with visible progress bars but no real effect Sudden system slowdowns, high CPU usage, or unfamiliar processes named xmrig running in the background
Was sollte ich zuerst tun?
: Never run PowerShell commands copied from forum posts, chats, or unverified users Check for the directory C:\Windows\Background and a scheduled task named XMRig <your pc name Run a full antivirus scan, remove suspicious Microsoft Defender exclusions, and delete any detected miner files
Kann LegalAudit meinen Fall pruefen?
Ja. Starten Sie den kostenlosen Chat und fuegen Sie Nachricht, Link, Absender oder Zahlungsdaten ein.