Jump to content
Search In
  • More options...
Find results that contain...
Find results in...
Boobies Sprinkle

Steam Stealer malware begins to proliferate says Kaspersky Labs

Recommended Posts

Posted · Original PosterOP

Sources:

http://www.digitaltrends.com/computing/kapersky-finds-1200-versions-steam-stealer-malware/          

 

http://hexus.net/tech/news/software/91340-steam-stealer-malware-begins-proliferate-says-kaspersky-labs/

 

Over the past decade, Steam has become the go-to storefront for many PC gamers looking to expand their libraries. However, with its massive user base, the service has become a target for criminals - and new information from Kaspersky Lab suggest that the tools these wrongdoers are using are become more sophisticated.

 

A new piece of malware; thought to originate in Russia, is being implemented to gain unlawful access to Steam accounts, according to a report from Hexus. Various different versions of this " Steam stealer" exploit are being shopped around the dark corners of the Internet, with prices apparently starting at around $30.

 

The malware uses two main forms of attack to target users. It can be distributed via fake websites purporting to be legitimate, or through instant messages sent via Steam infrastructure - the latter being a method that's plagued the service for some time, and has prompted Valve to encourage vigilance among users.

Quote

Late last year we saw the Valve Blog report that around 77,000 Steam accounts are hacked every month. The news came with a new initiative from Valve to push users to adopt two-factor authentication using the Steam Guard Mobile Authenticator (part of the Steam mobile app). The popular PC gaming platform also implemented delays in the trading process to give people a decent chance of noticing they have been hacked and be able to act and get their account back. The delays amount to 3 days for trading items to go through the system, or 1 day for trades with Steam friends you have had for over 1 year. However in an email HEXUS has recently received from Kaspersky Lab, there's a new breed of malware increasing in popularity -built to gain control of your Steam Account.

Quote

The new malware originates from Russia, says Kaspersky, and it is sold under a malware-as-a-service business model for as little as £20. You can buy it "in different versions with distinct features, free upgrades, user manuals, custom advice for distribution and more," say the researchers.

There are still hurdles to jump to get the malware onto target user systems. Kaspersky says that "Steam Stealers are mainly distributed either via fake cloned websites hosting the malware or through a social engineering approach where the victim is targeted with direct messages, encouraging them to open a malicious file". However once on a target system the malware "steals the entire set of Steam configuration files," plus the Steam KeyValue file that contains user credentials, as well as the information that maintains a user's session. That theft enables cybercriminals to control the stolen accounts, assert the researchers.

 

         6952fcc0-d8ab-450f-9c58-c15d76d37ab5.png

Link to post
Share on other sites

This sucks big time. I would hate to lose my Steam account as I invested a lot of time and money into the games I own. On the other hand, I dont like that Steam is forcing me to use their app. I cant trade now without waiting 15 days because they havent made the app available for Windows Phone .. Its not like I am going to buy new phone so that I can just use their Steam Guard app... They should make it able to disable this requirement at my own risk.

 

And I dont care that we Windows Phone users are minority... Steam focused on Linux which is also minority and they poured a ton of money into it so why crap on WP users? I dont think that making the app available for WP is very hard to do or expensive for someone like Vavle.

Link to post
Share on other sites

Norwegians are too smart to click bogus shit xD

 

4 hours ago, Boobies Sprinkle said:

         6952fcc0-d8ab-450f-9c58-c15d76d37ab5.png

 

Conversely, I'd expect Sweden to be in the red ;)


In case the moderators do not ban me as requested, this is a notice that I have left and am not coming back.

Link to post
Share on other sites

Not only prices for Russia are the lowest on steam, they need to steal from those who pay more :(


Connection200mbps / 12mbps 5Ghz wifi

My baby: CPU - i7-4790, MB - Z97-A, RAM - Corsair Veng. LP 16gb, GPU - MSI GTX 1060, PSU - CXM 600, Storage - Evo 840 120gb, MX100 256gb, WD Blue 1TB, Cooler - Hyper Evo 212, Case - Corsair Carbide 200R, Monitor - Benq  XL2430T 144Hz, Mouse - FinalMouse, Keyboard -K70 RGB, OS - Win 10, Audio - DT990 Pro, Phone - iPhone SE

Link to post
Share on other sites

angola is too smart to fall for this 


One day I will be able to play Monster Hunter Frontier in French/Italian/English on my PC, it's just a matter of time... 4 5 6 7 8 9 years later: It's finally coming!!!

Phones: iPhone 4S/SE | LG V10 | Lumia 920

Laptops: Macbook Pro 15" (mid-2012) | Compaq Presario V6000

Link to post
Share on other sites
5 minutes ago, crisro996 said:

Romania's internet is so fast we don't even show up in the statistics.

Speaking from the grape vine, I hear that Romanian techies have better stuff to do than Steam. 

 

 

/s


Your resident osu! player, destroyer of keyboards.

Link to post
Share on other sites
3 hours ago, Castdeath97 said:

Anyone else notice the huge range for the red label?

 

2 hours ago, AlexTheRose said:

I love how red constitutes 8 to 62% of the stats available… thumbs up for accuracy, Kapersky.

Well only 2 countries are in red. So all we have to figure out is whether it's 8% for Brazil and 62% for Russia, or the other way around.

Link to post
Share on other sites
2 hours ago, AlexTheRose said:

I love how red constitutes 8 to 62% of the stats available… thumbs up for accuracy, Kapersky.

"Sorry, you must purchase a license key to achieve accuracy. Please give us money, pls?"

Link to post
Share on other sites

Well nice to see Croatia in grey area xD


Ryzen 7 3800X | X570 Aorus Elite | G.Skill 16GB 3200MHz C16 | Radeon RX 5700 XT | Samsung 850 PRO 256GB | Mouse: Zowie S1 | OS: Windows 10

Link to post
Share on other sites
23 hours ago, Thony said:

Not only prices for Russia are the lowest on steam, they need to steal from those who pay more :(

Those godless beady eyed communists at work again.


Ketchup is better than mustard.

GUI is better than Command Line Interface.

Link to post
Share on other sites
23 hours ago, That Norwegian Guy said:

Norwegians are too smart to click bogus shit xD

 

 

Conversely, I'd expect Sweden to be in the red ;)

I'm Norwegian by blood.  I apply to that logic.

 

32 minutes ago, Trik'Stari said:

Those godless beady eyed communists at work again.

That's what Rurik gets for leaving Norway.


Bloodshed and the Fenris-Wolf:

| CPU:  Ryzen 9 3900x | CPU Cooler:  EKWB EK-AIO 360 D-RGB | Paste:  Kryonaut | Motherboard:  ASUS ROG x570 Crosshair VIII Hero (Wi-Fi) | RAM:  G.Skill Ripjaws V Series 64 GB (4 x 16 GB) DDR4-3200 | Boot Drive:  Samsung 970 Evo Plus 1 TB M.2-2280 NVME | Storage Drives:  Crucial MX500 500 GB M.2-2280+Western Digital WD Blue 2 TB 2.5"+Toshiba N300 8 TB 3.5" 7200RPM+Toshiba X300 4 TB 3.5" | GPU:  ZOTAC GAMING GeForce RTX 2080 Ti AMP Extreme Core | Case:  Lian Li O11 Dynamic XL ROG Certified (Black) with Corsair SP140 49.49 CFM 140 mm Fans 2-Pack+4x Cooler Master SickleFlow 120 V2 Reds added | PSU:  EVGA SuperNOVA G2 750 W 80+ Gold Certified Fully Modular ATX Power Supply w/CableMod E-Series Cable Kit (Black/Red) | Case Fans:  2 Corsair SP140 49.49 CFM 140 mm Fans | Displays:  BenQ PD2700U 27.0" 3840x2160 60 Hz+Asus TUF Gaming VG27AQ 27.0" 2560x1440 165 Hz+MSI Optix MAG322CR 31.5" 1920x1080 180 Hz | Mouse:  Corsair M65 RGB ELITE | Keyboard:  Ducky Shine 7 Blackout - MK Exclusive First Release - RGB LED Double Shot PBT Mechanical Keyboard with Silent Red Switches | Mousepad:  Gaya Entertainment Oversized Gaming Mousepad Doom | Audio:  AKG K712 PRO Headphones+Audio-Technica ATR2500-USB Cardioid Condenser USB Microphone+Kingston HyperX Cloud II 7.1 Channel Headset+iBasso IT01 Dynamic Driver Audiophile In-Ear Monitors/Earbuds (Black)+Pair of Mackie MR624s(came with stands+isolation pads) | OS:  Windows 10 Pro |



Bifröst(ROG Zephyrus M GU502):

| CPU:  i7-9750h | RAM:  32GB Dual Channel 2666mhz CL 19(Stock+Samsung 16GB DDR4 PC4-21300, 2666MHZ, 260 PIN SODIMM, 1.2V, CL 19 ) | Storage:  1TB SSD with Optane | GPU:  Nvidia RTX 2060 | Display:  144hz 3ms | Mouse:  Corsair M65 Pro |

Link to post
Share on other sites

this is bs.. i used to visit a large scriptkiddie forum where they circulated shit like this, and multiple of them were up for sale starting around maybe 18 months ago. they were fully featured, with capabilities like running silently and deleting their .scr file when run, statistics, downloading, dropping and running of files (in case you wanted to really fuck up their day by ratting their system) etc etc. some came with bots to circulate the malware and to accept trades and route them through multiple accounts. 

 

never touched one. or a rat. it's a douchebag move and morally wrong. 

 

ended up leaving the site and wanted my acc deleted after around 50 posts


If I helped, hit the thumbs up icon below my post and pick it as 'Best Answer'

Resident living meme - I swear a lot; if you don't like it fuck off :^)

  My specs and shit down below.

Spoiler

Apollo: i5 4670K @ 4.6Ghz, Corsair H100i, MSI Z87I, EVGA GTX 1070 SC ACX3, Corsair 250D, 840 EVO 120GB, 1TB Seagate Barracuda, SeaSonic 520W PSU. Planned upgrades: 16GB RAM, 480/512GB SSD, new HDD

Sputnik: HP EliteBook 2570p, i5-3360M, 16GB DDR3, 256GB 840 EVO - Running Win10/Sierra dual-boot.  Future upgrades: i7-quad

Comet (home server): Atom D2500, 4GB 1066Mhz RAM, 2 x 320GB HDDs, 350W PSU, HAF-Stacker ITX, dual GbE. Cost me $80. back from the dead (mobo failure) bois

Spoiler

Main peripherals

- Corsair Strafe RGB MX Reds

- SteelSeries Siberia 650

- SteelSeries QcK+ CS:GO Camo 

- SteelSeries QcK+ Na'Vi Splash (Secondary pad, used for second rig)

- SteelSeries Rival 700

- SteelSeries Rival 300 (Secondary mouse, used for second rig)

 

 

 

Link to post
Share on other sites

Create an account or sign in to comment

You need to be a member in order to leave a comment

Create an account

Sign up for a new account in our community. It's easy!

Register a new account

Sign in

Already have an account? Sign in here.

Sign In Now

Newegg

×