Archive — US — techcrunch
Hackers planted a Steam game with malware to steal gamers’ passwords
Valve removed a Steampunk game, PirateFI, from Steam for being laced with malware designed to steal gamers' passwords and sensitive information, utilizing the Vidar infostealer. Researchers suggest it was modified from an existing game creation template and was part of a broader malware distribution effort. Its functionality includes stealing passwords, cookies, and crypto wallet details, complicating attribution to its creators.
Key points
- Valve removed 'PirateFI' from Steam due to malware presence.
- The malware, called Vidar, is capable of stealing sensitive data such as passwords and session cookies.
- Security studies indicate that 'PirateFI' was not a legitimate game but a modified game template to distribute the malware.
- Vidar has been used in prior cyber campaigns targeting various sectors, including ransomware deployment.
- Infostealers like Vidar are commonly sold in a malware-as-a-service model, making them accessible to less experienced hackers.
Why it matters
- In 2025, the rise of AI-driven malware and growing cyber threats in gaming sectors highlight the need for enhanced cybersecurity measures.
- Ongoing incidents involving infostealers showcase the urgency for gamers to practice caution and security, paralleling concerns from previous years.
- This event reflects trends in malware distribution techniques, emphasizing how attackers adapt to reach new audiences.
The rise of malware-laced content in gaming underscores the need for gamers to remain vigilant about their online security as cyber threats continue to evolve and expand.