Malware Distributed Through Twitch Chat Is Hijacking Steam Accounts

An anonymous reader writes If you use Twitch don't click on any suspicious links in the video streaming platform's chat feature. Twitch Support's official Twitter account issued a security warning telling users not to click the "csgoprize" link in chat. According to f-secure, the link leads to a Java program that asks for your name and email. If you provide the info it will install a file on your computer that's able to take out any money you have in your Steam wallet, as well as sell or trade items in your inventory. "This malware, which we call Eskimo, is able to wipe your Steam wallet, armory, and inventory dry," says F-Secure. "It even dumps your items for a discount in the Steam Community Market. Previous variants were selling items with a 12 percent discount, but a recent sample showed that they changed it to 35 percent discount. Perhaps to be able to sell the items faster."

Comments

Re:I do not understand

[TheRealQuestor]

If someone wants me to type in my account and then my password I won't

I really won't

Common sense tells me that no one has any right to demand me to type in my account name/number and then my password

That is why I do not understand why there _are_ people who are simply void of any common sense

Ain't there enough stories of scams already? Why can't those people learn _anything_ from the mistakes of others?

Except in this case it does not. It asks for your name and email. Nowhere does it say anything about a password.