Undetected Infostealer in Steam Game ...AGAIN

About this video

• Video Title: Undetected Infostealer in Steam Game ...AGAIN
• Channel: PC Security Channel
• Speakers: None explicitly named.
• Duration: 00:08:11

Overview

This video discusses a newly discovered infostealer malware disguised as a game on Steam. It explains how these malicious games are promoted, the technical methods used by the malware to steal information (like browser cookies and passwords), and the challenges in detecting and remediating such threats. The video also highlights the prevalence of Steam-related account compromises and emphasizes the importance of caution and due diligence when downloading games, even those recommended by friends.

Key takeaways

• New Infostealer on Steam: Another game on Steam has been found to contain an infostealer, shortly after a previous similar incident.
• Promotion Tactics: Malicious games are promoted through direct messages, appearing legitimate on the Steam store, leading users to download them.
• Malware Deception: The malware is hidden within the game download and often disguises itself as legitimate software, like an antivirus.
• Detection Evasion: The malware's large file size (189 MB) and its "day zero" status contribute to low detection rates by traditional antivirus software.
• Information Theft: The infostealer steals browser cookies (including authentication tokens), saved passwords, and system information, allowing attackers to compromise accounts and steal data.
• Attack Vector: The malware uses WScript to create a shortcut to the payload, then silently relaunches browsers in the background to exfiltrate data.
• Difficulty in Remediation: Once data is stolen and potentially sold on the dark web, it's very difficult to reverse the compromise.
• Steam Ecosystem Risks: The prevalence of valuable in-game economies and the hacking of Steam accounts contribute to a high number of infostealer victims.
• Importance of Caution: Users are advised to be extra cautious, verify game legitimacy (e.g., check for reviews), and never download games from unsolicited messages, even from friends.
• Flare Platform: The video highlights Flare as a tool for searching for compromised data on the dark web and monitoring organizational security.