Valve has removed the game 'Sniper: Phantom's Resolution' from the Steam storeafter many users reported that the demo installer infected their systems with malware .
The game was supposed to be an early preview of the title, with release scheduled for the coming months.
Players suspected something was wrong with the game after noticing that the details and descriptions had been copied from other titles. Furthermore, they were prompted to download the demo installer from an external GitHub repository (and not from the Steam platform).
See also: Arcane: New info-stealer malware targets users through game cheats
Analyzing the installer file, Reddit users noticed that it was called "Windows Defender SmartScreen.exe" and discovered commodity attack tools, such as a privilege escalation utility, a Node.js wrapper, and the "Fiddler" tool, which can intercept cookies.
The malware also executes a series of Node.js scripts and quickly terminates them to avoid detection. In addition, it executes a script named 'createShortcut.vbs' to ensure persistence.
Another indication that the game 'Sniper: Phantom's Resolution' was actually malicious is that the same developer profile on GitHub, "arda1337", hosts crypto tools and Telegram bot toolkits. GitHub was quick to remove the malicious repository after user reports, and Valve also removed the game from Steam.
At the same time, the game developer's website, at 'sierrasixstudios[.]dev', has been taken offline.
Users who installed the game have likely infected their computers with info-stealer malware. For this reason, they should uninstall the title and run a full system scan to remove any remaining malicious files.
See also: Phantom Goblin delivers stealer malware
Protection from info-stealer malware
Static detection methods for security are not enough to avoid software antivirus malware . A more robust approach should incorporate , equipped with advanced analysis capabilities.
It's also important to keep your operating system and applications up to date. These updates often include security that can protect your computer from the latest threats.
Avoid downloading tools and game cheats from untrusted sources. Even their appearance on legitimate platforms does not guarantee their safety and reliability.
See also: Poseidon Stealer attacks Macs via fake DeepSeek website
🔒 Protect your privacy with Proton VPN
Swiss VPN from the creators of Proton Mail — strict no-logs policy, strong encryption, and built-in NetShield that blocks ads, trackers, & malware.
- ✔ No-logs, based in Switzerland (except 14-Eyes)
- ✔ NetShield: blocks ads, trackers & malicious domains
- ✔ Covers all devices — free version available
The link is an affiliate link — SecNews may receive a commission at no additional cost to you. It does not affect the independence of our article writing.
Information security training is also crucial. This means knowing how to recognize and avoid phishing attacks , which attackers often use to install info-stealers.
Also, don't forget to use firewalls and monitor network traffic to help you immediately detect suspicious activity. Users to avoid executable files downloaded from strange websites.
Finally, using strong passwords and enabling two-factor authentication can provide an extra layer of protection. This can make it harder for attackers to gain access to your account, even if they manage to steal your password.
Source: www.bleepingcomputer.com
