Valve has removed from its Steam store the game title 'Sniper: Phantom's Resolution' following multiple users reporting that the demo installer infected their systems with information stealing malware. Users that installed the game have likely infected their computers with malware and are recommended to uninstall the title and run a full system scan to remove remaining malicious files. Before the title was pulled out, the developers on Wednesday warned players about downloading the game from websites/links outside Steam because of potential security risks. GitHub was quick to remove the malicious repository following user reports, and yesterday Valve also deleted the game from Steam. Analyzing the installer file, Reddit users noticed that it was named 'Windows Defender SmartScreen.exe' and discovered commodity attack tools such as a privilege escalation utility, a Node.js wrapper, and the tool 'Fiddler,' which could intercept cookies. Another indication that the game was actually malicious is that the same developer profile on GitHub, 'arda1337,' hosts crypto tools and Telegram bot toolkits. This incident comes only a month after Steam hosted the PirateFi title, which was used to distribute the Vidar infostealing malware. Bill Toulas Bill Toulas is a tech writer and infosec news reporter with over a decade of experience working on various online publications, covering open-source, Linux, malware, data breach incidents, and hacks. The game, published under the developer name 'Sierra Six Studios,' was supposed to be an early preview of the title with a release planned in the coming months.
This Cyber News was published on www.bleepingcomputer.com. Publication date: Fri, 21 Mar 2025 13:25:12 +0000