Steam Game Spread Malware That Target Crypto Wallet

[Youngrebel]

This this should be a good information for everyone in the forum and this will help people to guide their wallets by not allowing scammers to compromise the wallets. As the topic make it clear. I don't advise people to connect their wallets to any casino website. Scammers/cybercriminals always have new plans to execute.

Steam Game Spreads Malware That Targets Crypto Wallets

Cybercriminals embedded multiple viruses into the Steam game Chemia, including Hijack Loader, Fickle Stealer, and Vidar Stealer. These tools collected passwords, browser data, and even seed phrases from crypto wallets such as MetaMask.

The hacking group EncryptHub (Larva-208) is believed to be behind the attack.

Valve has removed Chemia, but similar malware incidents have involved Steam titles like Sniper: Phantom’s Resolution and PirateFi.

Read More

[headingnorth]

Anyone who is dumb enough to use an online casino deserve what they get.

[Alphakilo]

This this should be a good information for everyone in the forum and this will help people to guide their wallets by not allowing scammers to compromise the wallets. As the topic make it clear. I don't advise people to connect their wallets to any casino website. Scammers/cybercriminals always have new plans to execute.

Aside the advice of connecting your wallet to an online casino the general rule of thumb is to not call neck your wallet to any third party application software no matter whatever reason you have been given. You don't even need anyone to tell you this if you are self conscious or aware.

There is a reason why some Iinformation is personal and only you or your partner(in case of emergency) should know it.

[Youngrebel]

Anyone who is dumb enough to use an online casino deserve what they get.

Using online casino is not a bad idea but it is not advisable to connect your wallet to those casinos. If the casino operate genuinely then there is nothing bad to use them. Don't click suspicious links either a good casino or not.

[HONDACD125]

People need to understand that it's not advisable for them to store funds or have wallets in devices that they use for day to day stuff like playing games, downloading and trying different software and apps, and even do a lot of surfing over the internet, because these things can always pose a threat towards your financial safety and you wouldn't want that to happen, so it's better to be cautious than being regretful later, and one can be cautious by not doing usual things on devices where they store their funds or wallets to keep those things safe from exploits and hacks, etc.

That being said, I never recommend keeping large amounts of money in decentralized wallets, such as MetaMask, because I don't consider them being too safe for containing large amounts. One should only keep small amounts in such wallets, amounts that they believe they will use and won't be kept there for long. If the funds are exhausted and you need more, you can always deposit more, it doesn't take that much money on fees to do that.

[Odogwu-Blockchain]

Anyone who is dumb enough to use an online casino deserve what they get.

Using online casino is not a bad idea but it is not advisable to connect your wallet to those casinos. If the casino operate genuinely then there is nothing bad to use them. Don't click suspicious links either a good casino or not.

Betmode uses a decentralized wallet to enable its users start betting on the platform, could it be meaning betmode will certainly lure users into exposing their seed phrase? No.

What I can only advise in this case is that, users should pay attention to a legit site URL and never fall for the cloned one, if a user skips checking the URL, that users data is liable to be hacked.

[I_Anime]

Anyone who is dumb enough to use an online casino deserve what they get.

Using online casino ain’t bad , everything that have advantages also have disadvantages too . So online casino has various disadvantages, beside in casino you don’t need to connect your wallet to withdraw nor deposit, various coin depositing addresses has already been provided for their users . Not only casino is not advisable to connect wallet that have your assets in to any random site or applications , better to play it safe even those that are into airdrop are aware of the risk too.

[nakamura12]

I'd say that people shouldn't connect their wallet to any casinos that they found or isn't sure if it's safe or not. If a person want to connect a wallet then it should be a dummy wallet for testing purposes as to avoid the main wallet to get compromised if connected to a casino or any websites/platforms that ask to connect a wallet or has a feature to connect wallets. This is what I do if I want to connect a wallet which I use a dummy wallet to connect.

[boyptc]

Valve should be more strict in accepting games and have them listed on their library before everyone can purchase it. They need to increase their security measures for it because if not, many games like that will take advantage of them and can cause a lot of losses stealing their user's funds.

Anyone who is dumb enough to use an online casino deserve what they get.

There is nothing wrong with that.

But connecting wallets, maybe metamask and other wallet extensions directly to them is dangerous. Just use login details that's mainly used for that casino.

[Furious 7]

The fact is that even though it seems like this is always a concern and there is a lot of advice not to be careless such as connecting personal accounts to public things such as gambling or being connected to games, there are still a lot of people who do it.

I would consider something like this as negligence but indeed by seeing there are still many victims it seems that there are still a lot of people who lack literacy on things that are actually dangerous but are not too concerned because they don't want to be bothered with it.

Be smart for us to remain a conscientious person especially when dealing with finances or wallets in which there is our portfolio because it could be that consciously or not maybe we are currently being watched and there are some parties who are waiting for us to make mistakes to benefit themselves in a dirty way.

[headingnorth]

Anyone who is dumb enough to use an online casino deserve what they get.

Using online casino is not a bad idea but it is not advisable to connect your wallet to those casinos. If the casino operate genuinely then there is nothing bad to use them. Don't click suspicious links either a good casino or not.

Why anyone would trust a casino is beyond me. Gambling is just stupid in general.
People who run casinos tend to be very shady, and online casinos are much worse.

When you are in a physical casino at least you can see what the dealer and other players
are doing, but with online casinos you can't see what anyone is doing. Which is probably the
main reason they are illegal in the US.

Brick and mortar casinos are still rigged against you, but much less so than online casinos.
On top of that, you have to worry about the website giving you viruses and malware.

[peter0425]

This this should be a good information for everyone in the forum and this will help people to guide their wallets by not allowing scammers to compromise the wallets. As the topic make it clear. I don't advise people to connect their wallets to any casino website. Scammers/cybercriminals always have new plans to execute.

Steam Game Spreads Malware That Targets Crypto Wallets

Cybercriminals embedded multiple viruses into the Steam game Chemia, including Hijack Loader, Fickle Stealer, and Vidar Stealer. These tools collected passwords, browser data, and even seed phrases from crypto wallets such as MetaMask.

The hacking group EncryptHub (Larva-208) is believed to be behind the attack.

Valve has removed Chemia, but similar malware incidents have involved Steam titles like Sniper: Phantom’s Resolution and PirateFi.

Read More

Quite alarming. Steam is a very popular platform so I don’t know how or why a game was able to get pass security and cause harm to those who use steam. Maybe if you are a gamer, you should have different devices for holding crypto and the one you use for games.

[NotFuzzyWarm]

What is with all the talk about casino's?
Steam (owned by Valve), provides online games with no gambling - they are not a Casino.

The current game that was infected was not available to the general public - it was part of a select beta users group and gathered/sent feedback during game play which is why it was able to get infected. That said, yes Valve needs to make sure that all input from users of both beta and live games, is properly checked by AV software to prevent this from happening again.

[Fivestar4everMVP]

This this should be a good information for everyone in the forum and this will help people to guide their wallets by not allowing scammers to compromise the wallets. As the topic make it clear. I don't advise people to connect their wallets to any casino website. Scammers/cybercriminals always have new plans to execute.

Steam Game Spreads Malware That Targets Crypto Wallets

Cybercriminals embedded multiple viruses into the Steam game Chemia, including Hijack Loader, Fickle Stealer, and Vidar Stealer. These tools collected passwords, browser data, and even seed phrases from crypto wallets such as MetaMask.

The hacking group EncryptHub (Larva-208) is believed to be behind the attack.

Valve has removed Chemia, but similar malware incidents have involved Steam titles like Sniper: Phantom’s Resolution and PirateFi.

Read More

Thanks very much for this information, it's indeed a good one and it's very important for the bitcoin community as well as the crypto community at large to take note of such happenings like this and take appropriate cover.

Scammer never rest, they are devising various strategies and tactics with which they plan to rob people, the unsuspecting victim off their hard earned money, we must always stay educated and guided at all times, like I would always say, one way to defeat scammers is to ensure we are always one or two or more steps ahead of them..

They don't use only casinos alone to phish and rob, but any thing at all, and this is why it's very important we don't go downloading just any app or connecting our wallet to just any website, we must ensure we that we are connecting to the legitimate and reliable source, and also ensure that apps we download are from official and well trusted sources as well.

[davis196]

Such malware programs shouldn't be difficult to be found and removed by any normal anti-virus and anti-malware program(including Windows Defender). Why would Steam/Valve allow games that have malware in their marketplace? Is their anti-malware scan/control system really that bad?
I've used Steam 10 years ago and my experience wasn't great, but back then, I would never imagine that I could ever download a game, that has malware from Steam.
I do have the feeling that everything on the internet is going downhill. Companies that were great in the past are slowly turning into scams.
Keep your crypto safe in a cold wallet and never store passwords/seed phrases on your PC.

[IIrik11]

it was a pre-released game which means it might have affected streamers

because they're the usually ones who get pre-release games from developers

but what i don't understand is how did steam let this happen?

isn't the games which are available to download and play on their platform their responsibility?

also, how was encrypthub (ransomware hacker, right?) able to add trojan downloader to the game files??

[Fiatless]

Anyone who is dumb enough to use an online casino deserve what they get.

Using online casino is not a bad idea but it is not advisable to connect your wallet to those casinos. If the casino operate genuinely then there is nothing bad to use them. Don't click suspicious links either a good casino or not.

Connecting a wallet to a game, casino or any third party devices or apps is risky. However, you could have more than one wallet for your crypto transactions. Now you could connect a wallet that has a small amount. There are wallets that you should never connect to any platform. It is also important to verify any message you receive from any platform.

[betswift]

Anyone who is dumb enough to use an online casino deserve what they get.

Using online casino is not a bad idea but it is not advisable to connect your wallet to those casinos. If the casino operate genuinely then there is nothing bad to use them. Don't click suspicious links either a good casino or not.

Connecting a wallet to a game, casino or any third party devices or apps is risky. However, you could have more than one wallet for your crypto transactions. Now you could connect a wallet that has a small amount. There are wallets that you should never connect to any platform. It is also important to verify any message you receive from any platform.

I thought the same thing.

Even if you do it - at least do it where it wouldn't bite you in the end.

[DubemIfedigbo001]

Good information OP, it's a well established fact that it's very unhealthy to connect your main wallet to any online service at all and not just casinos or game providers.

Even if you want to connect your wallet to claim faucets or some payment stuffs, do it with a separate wallet in another device that doesn't hold your major wallets or exchange accounts, you can always top up such wallets from your main holdings when you want.

If you've such wallets in the same device as your main wallets, you risk the latter since some Malwares can affect the device totally. Practicing separation of concerns really helps a lot.