This malware is being spread via the services chat feature.
It asks users to hit a link which is shortened using the shortening services available on internet.
When the user clicks on it, it gets directed to a file stored on Google drive.
The file looks like it’s an image file, complete with an image icon on it.
This file in fact is an executable and will steal your Steam credentials once executed.
Thats because it is.
But if we are reporting it, it shows that sometimes even the most obvious attacks can get victims.
Most gamers are aware of such malware attacks and remain always vigilant enough to stay away from malicious sites.
But at times, people do tend to fall prey as has happened in this case many a times.
Here is a example of one of them.
(and in some cases download automatically), he writes.
Apparently, its too obvious
Now for the good news bit.
Most reputable antivirus solutions detect it and prevent its download on the computer.
37 out of 55 antivirus engines on VirusTotal have no trouble quarantining it on the spot.
This is the only reason that Steam users may think it is legit and fall prey to the malware.
source: www.techworm.net
