this post was submitted on 24 Sep 2026
40 points (95.5% liked)

Games

50934 readers
837 users here now

Welcome to the largest gaming community on Lemmy! Discussion for all kinds of games. Video games, tabletop games, card games etc.

Rules

1. Submissions have to be related to games

Video games, tabletop, or otherwise. Posts not related to games will be deleted.

This community is focused on games, of all kinds. Any news item or discussion should be related to gaming in some way.

2. No bigotry or harassment, be civil

No bigotry, hardline stance. Try not to get too heated when entering into a discussion or debate.

We are here to talk and discuss about one of our passions, not fight or be exposed to hate. Posts or responses that are hateful will be deleted to keep the atmosphere good. If repeatedly violated, not only will the comment be deleted but a ban will be handed out as well. We judge each case individually.

3. No excessive self-promotion

Try to keep it to 10% self-promotion / 90% other stuff in your post history.

This is to prevent people from posting for the sole purpose of promoting their own website or social media account.

4. Stay on-topic; no memes, funny videos, giveaways, reposts, or low-effort posts

This community is mostly for discussion and news. Remember to search for the thing you're submitting before posting to see if it's already been posted.

We want to keep the quality of posts high. Therefore, memes, funny videos, low-effort posts and reposts are not allowed. We prohibit giveaways because we cannot be sure that the person holding the giveaway will actually do what they promise.

5. Mark Spoilers and NSFW

Make sure to mark your stuff or it may be removed.

No one wants to be spoiled. Therefore, always mark spoilers. Similarly mark NSFW, in case anyone is browsing in a public space or at work.

6. No linking to piracy

Don't share it here, there are other places to find it. Discussion of piracy is fine.

We don't want us moderators or the admins of lemmy.world to get in trouble for linking to piracy. Therefore, any link to piracy will be removed. Discussion of it is of course allowed.

Authorized Regular Threads

Related communities

PM a mod to add your own

Video games

Generic

Help and suggestions

By platform

By type

By games

Language specific

founded 3 years ago
MODERATORS
Dremor@lemmy.world
JonsJava@lemmy.world
Dremor@jlai.lu
PerfectDark@lemmy.world
40
The People Playground Workshop has been subject to yet another Virus, though this time it actually stole and destroyed personal info and Discord logins. The workshop is, once again, removed for now. (store.steampowered.com)
submitted 5 days ago* (last edited 3 days ago) by hal_5700X@sh.itjust.works to c/games@lemmy.world
8 comments fedilink hide all child comments
 

Update: https://store.steampowered.com/news/app/1118200/view/706658093186942203

you are viewing a single comment's thread
view the rest of the comments
[–] I_Jedi@lemmy.today 12 points 5 days ago (1 children)
  • Patient Zero downloads the virus.
  • Virus embeds itself in any mods Patient Zero uploaded to the Workshop.
  • Anyone who subscribes to any of Patient Zero's mods auto-updates with the virus.
  • When these people launch the game, the mods they uploaded are also infected the virus.
  • And so on and so on until everyone is infected.
[–] Pika@sh.itjust.works 4 points 5 days ago* (last edited 5 days ago) (1 children)

That would make sense, although I think it's unlikely that it embeds itself into the mods. It would probably replace itself. Since in order to embed itself into the mod, it would have to know how the mod is made/structured but I guess it would be possible if it was able to completely replace the existing mods with the worm.

edit: Yeah, a post-work summary was posted today, and it basically did exactly that, it replaces all workshop mods created by the user with a copy of the worm, which then spreads. Honestly, I feel like this is also a vulnerability on Steam's behalf as well because I don't see any realistic use case of why it shouldn't require either a 2FA or some form of validation before pushing an update to the game, especially one that changes the entire mod out for something else.

This one happened to be allowing C-sharp integration, which is how the original infection happened, because that allowed for compilation at runtime. However, this vulnerability could technically happen with any Steam Workshop-enabled game. It's really concerning that there's no check system in place. The Steam depot should not allow you to be able to do a full mod replacement using a session or with token.

[–] DeadDigger@lemmy.zip 1 points 5 days ago

Depending on the system it is just one more full for the engine