Malware Disguised as Mod Infects Players in Popular Steam Game— Here's What Happened

A popular mod for the game Slay the Spire, known as Downfall, was compromised by hackers, leading to the dissemination of malware among players.

(Photo : Table 9 Studio/Photo Taken From Steam)
Table 9 Studio/Photo Taken from Steam.

Downfall Mod Hit by Malware: Impact and Response

The Downfall mod, lauded for its expansive content and introduced in 2017, became a conduit for malware after a recent hacking incident. This breach, as announced by the Steam Community, identified during the holiday season, involved the upload of a malicious file aimed at stealing user passwords linked to browsers, Discord, and Telegram.

Players who downloaded the compromised Downfall mod were exposed to potential password theft. Upon opening the mod, users encountered a Unity library popup, initiating the attempted password theft. Although most antivirus programs failed to prevent the execution of the malware, they did hinder the transmission of stolen information to the hackers.

The mod's creators swiftly addressed the issue, urging affected users to change passwords, enable two-factor authentication, and avoid interacting with suspicious files while online. The mod has since been patched and declared safe for use.

Security Measures and Ongoing Concerns

Valve, the parent company of Steam, had previously bolstered security measures in October by mandating creators to employ two-factor authentication. Despite these efforts, the breach raises questions about the efficacy of these protocols and how hackers managed to infiltrate the mod makers' accounts.

Unfortunately, such security breaches are not uncommon in the gaming realm, particularly within projects like mods, which often lack robust security measures. This incident mirrors previous malware infiltrations in June that targeted various Minecraft mods. Although patches were swiftly implemented, some players fell victim to the hackers' efforts, mirroring the impact observed in the Slay the Spire community.

Slay the Spire, created by MegaCrit, is a roguelike deck-building game akin to the pioneering title Dominion. Despite being nominated for PC Game of the Year at the 2019 Golden Joystick Awards, it was ultimately bested by World of Warcraft Classic.