Hackers are using steam to spread Cryptocurrency malware!
A new Steam scam tricks players into running malicious PowerShell commands under the guise of technical support, secretly installing hidden cryptocurrency mining malware.
Steam users are being warned about a new scam that disguises itself as technical support while secretly installing cryptocurrency mining malware. The attack is spreading through Steam forums, where unsuspecting players looking for help with game issues are being tricked into running harmful commands on their computers.
According to user reports, the scam directs victims to open PowerShell with administrator privileges and execute a series of commands claimed to fix performance or compatibility problems. Instead, the commands install a hidden cryptocurrency miner that uses the victim's computer to generate digital currency without their knowledge.
The malware reportedly presents itself as a Windows optimization tool, displaying fake progress messages to make the installation appear legitimate. By requesting administrator access, it can also bypass security features such as Windows Defender, making detection more difficult. Once installed, the software creates a startup task that automatically launches every time Windows boots, with some users reporting that it is particularly difficult to remove.
Cybersecurity experts identify this tactic as a ClickFix attack, a social engineering method that convinces users to solve a problem by unknowingly giving attackers elevated access to their systems. Rather than exploiting a vulnerability in Steam itself, the scam relies on users following malicious instructions posted by bad actors posing as helpful community members.
The warning comes as Steam continues introducing new features throughout 2026, including improvements to its gifting system that allow users to send games to friends without Steam accounts and across different regions. While Valve continues to expand the platform, players are reminded to remain cautious when following troubleshooting advice shared online.
Users should avoid running PowerShell commands provided by strangers, only download software from trusted sources, and verify support information through official Steam channels. Taking a few extra moments to confirm the legitimacy of online advice can help prevent malware infections and protect personal data.
According to user reports, the scam directs victims to open PowerShell with administrator privileges and execute a series of commands claimed to fix performance or compatibility problems. Instead, the commands install a hidden cryptocurrency miner that uses the victim's computer to generate digital currency without their knowledge.
The malware reportedly presents itself as a Windows optimization tool, displaying fake progress messages to make the installation appear legitimate. By requesting administrator access, it can also bypass security features such as Windows Defender, making detection more difficult. Once installed, the software creates a startup task that automatically launches every time Windows boots, with some users reporting that it is particularly difficult to remove.
Cybersecurity experts identify this tactic as a ClickFix attack, a social engineering method that convinces users to solve a problem by unknowingly giving attackers elevated access to their systems. Rather than exploiting a vulnerability in Steam itself, the scam relies on users following malicious instructions posted by bad actors posing as helpful community members.
The warning comes as Steam continues introducing new features throughout 2026, including improvements to its gifting system that allow users to send games to friends without Steam accounts and across different regions. While Valve continues to expand the platform, players are reminded to remain cautious when following troubleshooting advice shared online.
Users should avoid running PowerShell commands provided by strangers, only download software from trusted sources, and verify support information through official Steam channels. Taking a few extra moments to confirm the legitimacy of online advice can help prevent malware infections and protect personal data.
Pexels
Cover Image
Pexels
Sources
