{"id":5217,"date":"2025-02-14T13:11:13","date_gmt":"2025-02-14T13:11:13","guid":{"rendered":"https:\/\/fusionmindlabs.com\/blogs\/hackers-upload-malware-game-on-steam\/"},"modified":"2025-02-14T13:11:13","modified_gmt":"2025-02-14T13:11:13","slug":"hackers-upload-malware-game-on-steam","status":"publish","type":"post","link":"https:\/\/fusionmindlabs.com\/blogs\/hackers-upload-malware-game-on-steam\/","title":{"rendered":"Hackers Upload Malware Game on Steam"},"content":{"rendered":"\n<\/p>\n<p><strong>Malware Incident on Steam<\/strong><br \/>\nOn February 6, a group of hackers managed to upload a pirate-themed survival game called PirateFi to the Steam platform under the developer name Seaworth Interactive. The game, which was available for at least a week before being taken down by Valve, contained malware designed to steal users&#8217; browser cookies, potentially allowing hackers to access their online accounts.<\/p>\n<p><strong>Details of the Incident<\/strong><br \/>\nAccording to SteamDB, between 800 and 1,500 users may have downloaded the free-to-play game before it was removed from the Steam storefront. Notably, the game&#8217;s screenshots and promotional video were actually taken from an existing survival game called Easy Survival RPG. Some users&#8217; anti-virus software flagged the game as &quot;Trojan.Win32.Lazzzy.gen,&quot; a type of malware that attempts to steal browser cookies, before they even ran it.<\/p>\n<p><strong>Image of the Incident<\/strong><br \/>\n[Image: PirateFi Tweet, courtesy of SteamDB]\n<p><strong>Job Offers and Suspicious Activity<\/strong><br \/>\nPCMag, which initially reported on the game, found that someone representing PirateFi was posting job offers for an &quot;in-game chat moderator&quot; on Telegram, with a salary of $17. One reader suspected that they were communicating with a chatbot, which encouraged them to download the malware-infected game.<\/p>\n<p><strong>Valve&#8217;s Response<\/strong><br \/>\nAfter removing the game from the platform, Valve notified users who played PirateFi that the developer&#8217;s Steam account had uploaded builds containing suspected malware. The company recommended that affected users run a full system scan with anti-virus software and check for any suspicious or newly installed software on their PCs. In extreme cases, Valve suggested considering a Windows reinstall to completely eliminate any potential malware.<\/p>\n<p><strong>Lack of Developer Presence<\/strong><br \/>\nIt is worth noting that Seaworth Interactive, the supposed developer of PirateFi, had no website or social media presence, which should have raised concerns about the game&#8217;s legitimacy. This incident has raised questions about Valve&#8217;s vetting process and how a game with malware was able to be released on the platform.<\/p>\n<p><strong>Preventing Future Incidents<\/strong><br \/>\nWe reached out to Valve for comment but have not received a response. The main question remains: How did a game with malware make it onto Steam, and what measures will Valve take to prevent similar incidents in the future?<\/p>\n\n<br \/><a href=\"https:\/\/gizmodo.com\/hackers-somehow-uploaded-a-game-full-of-malware-on-steam-2000563713\" rel=\"nofollow noopener\" target=\"_blank\">Source Link<\/a><\/p>\n","protected":false},"excerpt":{"rendered":"<p>Malware Incident on Steam On February 6, a group of hackers managed to upload a pirate-themed survival game called PirateFi to the Steam platform under the developer name Seaworth Interactive&#8230;.<\/p>\n","protected":false},"author":0,"featured_media":5218,"comment_status":"","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[47],"tags":[953],"class_list":["post-5217","post","type-post","status-publish","format-standard","has-post-thumbnail","category-news","tag-steam"],"jetpack_featured_media_url":"https:\/\/fusionmindlabs.com\/blogs\/wp-content\/uploads\/sites\/9\/2025\/02\/Screenshot-2025-02-13-at-1.35.52\u202fPM-e1739471779439.jpg","_links":{"self":[{"href":"https:\/\/fusionmindlabs.com\/blogs\/wp-json\/wp\/v2\/posts\/5217","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/fusionmindlabs.com\/blogs\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/fusionmindlabs.com\/blogs\/wp-json\/wp\/v2\/types\/post"}],"replies":[{"embeddable":true,"href":"https:\/\/fusionmindlabs.com\/blogs\/wp-json\/wp\/v2\/comments?post=5217"}],"version-history":[{"count":0,"href":"https:\/\/fusionmindlabs.com\/blogs\/wp-json\/wp\/v2\/posts\/5217\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/fusionmindlabs.com\/blogs\/wp-json\/wp\/v2\/media\/5218"}],"wp:attachment":[{"href":"https:\/\/fusionmindlabs.com\/blogs\/wp-json\/wp\/v2\/media?parent=5217"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/fusionmindlabs.com\/blogs\/wp-json\/wp\/v2\/categories?post=5217"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/fusionmindlabs.com\/blogs\/wp-json\/wp\/v2\/tags?post=5217"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}