Family-friendly Steam game is replaced by crypto malware before being delisted
A family-friendly Steam game listing was hijacked and replaced with cryptocurrency-stealing malware. The puzzle game Rodent Race’s Steam store page was transformed into a malicious application masquerading as the indie horror title Beyond The Dark (APPID: 3393800).
Security researcher Eric Parker discovered that Beyond The Dark functioned as a malware dropper, with malicious code embedded within its Unity DLL file. The dropper automatically retrieves additional malware from a command and control server, with its behavior customized based on the target system’s installed applications and Chrome extensions—specifically targeting cryptocurrency and DeFi wallet platforms.
After the investigation, Valve delisted the malicious application from Steam. The incident demonstrates the security risks posed by compromised game listings on digital storefronts and highlights how malware can be distributed to users under the guise of legitimate indie games. The malware’s specific targeting of cryptocurrency and DeFi wallets indicates a sophisticated operation focused on digital asset theft.