Malware Uses Twitch Chat to Target Steam Users

[[Coi] Mr.CLuBBeR]

Fake raffle invites being used to ensnare victims

Twitch, the popular videogame streaming site recently acquired by Amazon, is being used to propagate malware that specifically targets Steam users, security firm F-Secure revealed in a blog post Friday. Gullible Steam users are being lured into clicking a malicious link contained in bot-sent raffle invites on Twitch that promise them the opportunity to win such prizes as Counter-Strike: Global Offensive items. On the other side of that link, there is usually a Java program asking for some basic personal info, a congratulatory message, a malicious Windows binary file, and an empty Steam wallet.
The malware, dubbed “Eskimo” by F-Secure, is capable of a host of things: taking screenshots, adding new Steam friends, accepting pending friend requests and trading items.
“This malware, which we call Eskimo, is able to wipe your Steam wallet, armory, and inventory dry. It even dumps your items for a discount in the Steam Community Market,” the company warned in its blog post. “Previous variants were selling items with a 12% discount, but a recent sample showed that they changed it to 35% discount. Perhaps to be able to sell the items faster.”
“All this is done from the victim's machine, since Steam has security checks in place for logging in or trading from a new machine. It might be helpful for the users if Steam were to add another security check for those trading several items to a newly added friend and for selling items in the market with a low price based on a certain threshold. This will lessen the damages done by this kind of threat.”
Twitch says it has already blocked the malicious link in question and requested its users to be cautious when dealing with links of unknown origin.
Follow Pulkit on Google+


More...