HACKER SNEAKS INFOSTEALER MALWARE INTO EARLY ACCESS STEAM GAME

Summary from the TLDR InfoSec newsletter

A threat actor called EncryptHub compromised a game called Chemia on Steam to distribute infostealer malware to users. Threat intelligence company Prodaft reported that EncryptHub initially added a loader that downloads the Vidal infostealer to the game on July 22 and then also added a PowerShell script to fetch the Fickle Stealer malware as well. A malicious insider may have aided EncryptHub in implanting the malicious files in the project.