Steam Removes Free Game From Store Over Malware Concerns

[GGforever]

Steam recently delisted a free game from its store, named PirateFi, suspecting that it may have contained malware. As such, the platform has requested customers who installed the game to do a full system scan utilizing a trusted antivirus software, even going so far as to recommend a full system wipe. Valve claims it is likely that malicious files were opened on systems where the game was installed and launched, necessitating such drastic measures. As noted by TechCrunch, the game had a total of 51 reviews on Steam, with an average rating of 9/10. SteamDB reveals that the game was installed by anywhere from 800 to 1500 people, which is to be expected considering that the game was launched on the 6th of February and was live for almost a week before Valve took action.

With the above facts in mind, if any of our esteemed readers had the misfortune of installing the aforementioned game, we would highly recommend performing a full system wipe.



View at TechPowerUp Main Site | Source

 

[R-T-B]

Malware on steam... That's pleasant. Does valve do at least basic virus scan of uploads? I would hope so.

 

[AsRock]

Malware on steam... That's pleasant. Does valve do at least basic virue scans of uploads? I would hope so.

I bet Steam is not going take some responsibility for it, you'd think they would check before they release some thing.

Who's going to pay for those systems that it infected ?, more so those who don't really know how too.

 

[LabRat 891]

Malware on steam... That's pleasant. Does valve do at least basic virue scans of uploads? I would hope so.

I assume they do. If not, this would otherwise have been a much more common occurrence.

I'd gather the malware was deeply hidden within the game files, or isn't traditionally detectable. (like, a script or part of the game that actively creates the malicious software?)

 

[Philaphlous]

Wait a game named "piratefi" has malware on it? How ironic....

 

[_roman_]

Having your games on the same unencrypted, accessible, operating system with the same user as your data is always a good idea. Even better when it's a binary blob operating system with binary games, binary games, ... Backups are only for scared cats. - sarcasm off

 

[windwhirl]

Who's going to pay for those systems that it infected ?, more so those who don't really know how too.

There's malware that keeps getting not detected by Windows Defender and such, that steals your tokens and your passwords.

Steam is not gonna pay shit anyway, you can't ask them to have 100% detection rate.

 

[JWNoctis]

Think it's reasonable to say at this point that a lot of those reviews are fake as well. 51 average 9/10 reviews out of 1,500 install sounded optimistic to me.

Makes you wonder how many remains hidden, maybe on a timed trigger, and how many more are open to compromise in some non-obvious way.

 

[LabRat 891]

Think it's reasonable to say at this point that a lot of those reviews are fake as well. 51 average 9/10 reviews out of 1,500 install sounded optimistic to me.

Makes you wonder how many remains hidden, maybe on a timed trigger, and how many more are open to compromise in some non-obvious way.

I mean... good point. But, there's something a lil hard for me to wrap my head around about this.

*This* was a paramount concern back when Steam was still new. In ~22 years, this has been an exceptionally rare occurrence.
That, has earned trust.
Nowdays, I'm not sure whether the concern is newly valid (with escalating technologies and techniques)
or, if this is something that Valve is already silently doing it's best on, and this merely slipped through.

I know the reality and detail to the situation is much more complex than I present it...
just, 'willingly taking the PoV of a know-little longtime Steam user

 

[R-T-B]

Having your games on the same unencrypted, accessible, operating system with the same user as your data is always a good idea. Even better when it's a binary blob operating system with binary games, binary games, ... Backups are only for scared cats. - sarcasm off

I mean... trust is a thing in this world. Some just forget to vet on steam because this happens so seldom. You are right, but being a gamer and not expecting binarly blobs is impractical.

 

[Shihab]

Think it's reasonable to say at this point that a lot of those reviews are fake as well. 51 average 9/10 reviews out of 1,500 install sounded optimistic to me.

Makes you wonder how many remains hidden, maybe on a timed trigger, and how many more are open to compromise in some non-obvious way.

It's not what's already there that scares me. I doubt there are many -if any- more. What does is the fact that this is basically a proof-of-concept that such an attack can be relatively easily pulled off.

Valve needs to revisit their vetting process. Especially for updates.
In the meantime, I'm personally avoiding f2p games from unknown devs.

 

[Vayra86]

Having your games on the same unencrypted, accessible, operating system with the same user as your data is always a good idea. Even better when it's a binary blob operating system with binary games, binary games, ... Backups are only for scared cats. - sarcasm off

After some 6500 games installed and played on my own PCs over the years I think we can say this is a complete and utter non issue.

Hell, I've pirated at least a third of those. No issues. Due diligence required, as in all things in life, sure.

Do you really install and play anything that pops up on screen... I guess some people do. Why would I be installing PirateFi, pray tell? OH! Of course... because people are mindless social media sheep these days, following a daily hype and getting tricked into it... Darwin is doing good work for those people. Maybe they will curate their own minds a bit better next time.