PSA: Don’t execute PowerShell commands proffered by Steam forum randos, because it could infect your rig with a cryptominer
Attackers have used Steam discussion forums to post fake technical fixes for game crashes, missing items and other problems, persuading users to run PowerShell commands with administrator privileges. The commands install an XMRig cryptominer rather than fixing the stated issue, showing how community support forums can be exploited to trick users into compromising their own PCs.
The malicious script reportedly presents itself as a Windows optimisation utility while downloading the miner and making it persistent. It can add antivirus exclusions, store the payload in a Windows-looking folder and create a scheduled task running with SYSTEM privileges; affected machines may suffer high processor use, poorer performance and higher power consumption. Users are advised not to run commands supplied by unverified forum accounts and to rely on official support channels.
- Fake Steam fixes can install a cryptominer.
- Administrator PowerShell access enables the attack.
- Use only trusted, official troubleshooting guidance.