Gamers warned their passwords could be STOLEN after installing brand new title – simple mistake could cost you thousands

Scottish Sun

27-07-2025

Click to share on X/Twitter (Opens in new window)
Click to share on Facebook (Opens in new window)
AN URGENT warning has gone out to gamers after a alleged scam to rob players of thousands of pounds was uncovered.
Malware has reportedly been uploaded to a popular game on Steam, which could give hackers full access to your personal information.
Sign up for Scottish Sun
newsletter
Sign up
2
An urgent warning has gone out to gamers after Malware was uploaded to a Steam game
Credit: Supplied
2
The malware allows hackers to access your device at any time
Credit: Getty
A hacker - known as EncryptHub - has eportedly compromised a game on the online platform Steam, which now installs info-stealing malware on devices - when downloaded.
The sinister scammer - also known as Larva-208 - allegedly launched his plot on July 22 when he uploaded the HijackLoader malware (CVKRUTNP.exe) onto the game.
According to Bleeping Computer, this dodgy software was uploaded to the popular game Chemia, originally developed by Aether Forge Studios.
The software establishes 'persistence' - meaning it gives a hacker unlimited access - on your device.
Then, it downloads the Vidar infostealer (v9d9.exe) while receiving a command-and-control address from a Telegram channel.
A second piece of malware allegedly added to Chemia harvests your data from web browsers - including your account details, auto-fill information, cookies and cryptocurrency data.
With all of that data and access to your computer, the hacker is then able to rob users of their hard-earned cash.
A report shared with BleepingComputer revealed that the scheme relies on players trusting online platforms, instead of using 'traditional deception techniques'.
It is unknown how EncryptHub allegedly managed to upload the files onto the game and Chemia's developer has not commented on the issue.
The game remains on Steam and it is unclear if the latest version is safe to download.
Watch trailer for RoboCop-Rogue City game that's FREE to claim on PlayStation
The Sun has contacted Steam's operator, Valve, for comment.
EncryptHub was behind a cyberattack campaign last year which affected 600 companies worldwide.
The news comes after the beloved supermarket M&S recovers from a major cyberattack this year.
Marks and Spencer was forced to shut down their online website while it grappled with the crisis, while £700 million was wiped off its stock market value.
Eventually, the retailer was able to return to normal after being unable to make deliveries for some time.
After the attack, the company offered users of its Sparks loyalty scheme the chance to choose between two of M&S' best selling products.
These included:
Percy Pigs or a Swiss Truffle Assortment Box
Bouquet of Flowers or bottle of Prosecco
A punnet of Grapes or a packet of Outrageously Chocolatey Round Biscuits.
Sharry Cramond, director of loyalty, fashion, home & beauty marketing and masterbrand, said: 'Over the last three months, our colleagues have demonstrated real commitment and teamwork. At the same time, our customers have shown us fantastic support and loyalty.
"These extra Sparks rewards are a small gesture to say thank you.'