Players report that individuals are using Outlast's multiplayer invitations to carry out suspicious scams, subsequently compromising the targets' computers. However, it has not been technically confirmed whether such attacks can be executed directly through the game or if the game itself contains security vulnerabilities.
According to player reports, strangers first add targets as friends on Discord, engage in friendly conversation for several days, and then suggest playing a game together. In some cases, the other party initially invites the target to play The Devour, a co-op horror game considered safe, only to insist on switching to the less popular Outlast after the target lets their guard down. Similar experiences have reportedly appeared in recent Steam reviews.
Current theories suggest that Outlast's single-player mode poses no risk; the issue may arise when joining another player's multiplayer session or an open public lobby, with attackers potentially entering public rooms proactively. However, it remains unclear whether the so-called attacks stem from network code, custom content, or other factors. The developers stated that victims may have been诱导 (induced) to install third-party software or mods; malicious custom maps and Workshop content have also been listed as possible causes, but these explanations remain speculative.
The PC servers for Dark Souls III were previously shut down due to a remote code execution vulnerability, demonstrating that online games can serve as entry points for attacks. However, this past incident does not prove that the current events employ the same mechanism. Warning signs include strangers using "@username" upon first contact, immediately asking for your location, or insisting on "showing you something." Players can also restrict Discord friend requests to members of shared servers to reduce direct contact from unknown accounts.