Steam, the go-to gaming platform for millions of players worldwide, has thousands of games. While most of these titles are checked for malware and other malicious codes before they are available for download, PirateFi, a free to play game was reportedly packing infostealing malware. Advertised as a survival game set in a Minecraft like low-poly world, PirateFi involved base building, weapon crafting and food gathering and had received positive reviews. Developed by Seaworth Interactive, the game was available on Steam for almost a week (February 6 - February 12) and was downloaded by almost 1,500 users worldwide before it was taken down last week. The gaming platform also sent a notification to those who tried the game, suggesting that they reinstall Windows to get rid of the malware. When security researchers at SECUINFRA Falcon Team analyzed the malware, it was found that the game was laced with an infostealing malware called Vidar. The researchers also noted that PirateFi was built using an existing game template named Easy Survival RPG, which is how the developers were able to ship in the malware with a little effort. What is Vidar and how do I stay safe from infostealing malware? First discovered in 2018, Vidar infostealing malware is designed to steal personal information like credit card numbers, passwords, login credentials and cryptocurrency wallets, which is then sent to the attacker. In some cases, Vidar is also known to download and install more malware that may be undetected by antivirus software. In the last few years, Vidar has been spotted in various hacking campaigns like the one that attempted to steal Booking.com’s hotel credentials and planting malicious ads on Google Search. To stay safe from such malware, make sure you install programs and games from trusted sources. Even if it is a known platform like Steam or Epic Games, we suggest you stay vigilant and take a look at the reviews and make an informed decision. Also, make sure that you are using antivirus software.
