Game demo linked from Steam page contained malware, raising more security concerns for Valve

Last month, Steam faced controversy when the malware-infested PirateFi title made it onto the platform. Now, a gamer has discovered an infected demo linked from the Sniper: Phantom's Resolution Steam page. In this instance, Valve wasn't hosting a malicious file. Instead, the user noticed a suspicious external website with only a demo link. Redditors investigated and found evidence of malware in the download.

After receiving enough complaints, Valve removed the game from the Steam Store. Still, Sniper: Phantom's Resolution remains listed on Steam's website. The title looks like a generic FPS experience developed by Sierrasixstudios, with no information available about the studio. While lacking definitive proof, gamers accuse the developer of using stolen or faked screenshots.

When unpacking the demo, a Reddit poster encountered a typical Unity game folder structure. However, files that attempt to bypass Windows security are in the directories. The malware also appears to open a browser window for a potential cookie hijacking. The end goal seems to be to steal secure information stored on PCs. At least one popular anti-virus software failed to detect problems during a malware scan. Any gamer who tried to install the demo may want to reset passwords and monitor accounts for suspicious activity.

The latest Sniper: Phantom's Resolution saga highlights how difficult it is for Valve to keep Steam safe for players. Allowing external links has always been risky, even with the site warning users about content on third-party sites. Last Summer, Steam imposed new restrictions on linking to websites and social media accounts. Unfortunately, the rules don't apply to the official links section, often used to promote a game's official site or publisher. Yet, blocking all external URLs is an extreme measure, and would limit gamers from learning more about potential purchases.

Valve tries to accommodate small studios by making the game submission process accessible. Yet, for hackers willing to make the effort, Steam pages from unknown developers can still prey on unsuspecting gamers.