Steam Stealer Malware Becomes Extremely Sophisticated, Remains Very Cheap (securelist.com)
An anonymous reader writes: During the past years, malware aimed at stealing game inventory items from Steam accounts and logging Steam login credentials has become extremely sophisticated, but [has] remained at a lower-tier pricing range on underground hacking forums, rarely going above $10, never over $30. Valve says that it receives 77,000 complaints a month for hacked accounts, and Steam Stealers are responsible for most of them. [The] most targeted game is Counter-Strike: Global Offensive, while Kaspersky Lab says that most of the cyber-gangs behind these malware families are of Eastern European origin, mostly Russian.
There was a time where people faked their accounts being hi-jacked as a way of duplicating really expensive skins. They would then turn around and sell the skin which was scammed on a site like OpSkins and then keep the duplicated skin in their main account and still play with it. Not anymore though, Steam wised up and made some changes.
...isn't pretty much the whole world running AV now? Why are these things still getting installed?
Money goes into steam games/DLC money doesn't come back out. Valve can just reverse all exchanges, so even if you broker the trade of one game for another, it will all get reversed after a complaint.
The only way to make money is to convince someone to do an under-the-table trade, which most people know is pretty risky on its own.
Modern app appers know that ONLY apps can app apps, and LUDDITES who play LUDDITE games instead of apping appy apps deserved to get screwed over!
Apps!
anyone else?
Political debates have me rolling my eyes so much I think I got optical whiplash. I should sue. - Foamy The Squirrel
Steam thief: yet another phrase that meant something completely different 100 years ago.
information wants to be free and all and no one loses money when someone plays a game they didn't buy
Meh, I got nothin'.
Well there's the problem. > 90% of the people playing that are stupid children. (and "adults")
Never ever understood the hype that trash game gets.
In fact, generally most Valve games, they are generic-to-bad levels, none exceptional, including Half Life.
There are far better games in all genres. Even Half Life and its physics were crap back then. It was hard-coded crap that is still exactly the same today. You can crash the engine by setting a weight to zero. Nice gravity-by-division.
The thing that always gets me is the hilarious lie of "but Source is great for modding!". Yeah, gotta LOVE all those mods out there. SO many of them.
The majority of Source mods get abandoned because the engine is trash, crashes half the damn time and is inflexible as high FUCK.
The others that eventually do come out either get abandoned and left with serious bugs, or don't come out for an actual decade.
The only worthwhile thing Valve has ever made is Steam.
The concept that is, not the program, the program is the worst thing about Steam. Why is is still crap?! It is 2016 for crying out loud.
Like money? The vast majority of people's money is just bits in a database.
Good-bye
So build the stealing system inside the game to reduce the illegal activities. It looks like The Division has that sort of system implemented already.
When companies such as Steam can back their virtual products with the same security and universally guaranteed value as federal currency, perhaps I will change my mind. So far it seems to take more than a $10 warez for a sleezeball in Russia to take money out of my personal bank account and make it available for their own personal use.
Laws are rules for the court, but merely a bottom bar to hit for life. Think beyond laws in your actions always.
I paid a whole dollar for Ring Runner, a 2d space sim that is really fun to play.
I don't care if it is virtual. I don't care if I don't own it. I don't care if Steam might do something wonky I lose access. It cost me basically nothing and is lots of fun.
Going out to the movies is orders of magnitude more expensive.
I paid a whole dollar for Ring Runner, a 2d space sim that is really fun to play.
I don't care if it is virtual. I don't care if I don't own it. I don't care if Steam might do something wonky I lose access. It cost me basically nothing and is lots of fun.
No, we're talking about something even more ephemeral than a Steam game. We're talking about items for Steam games. People are not only spending money to buy games, they're spending money to buy items for their characters in these games. And they have enough monetary value to be worth stealing, so there's malware for that. Is there a number for that rule?
I personally think that buying items for games when you've already paid for the game or when the game is a moving target and the value of what you've paid actual money for can vary wildly in the future based on rebalancing is a bit daft, but if you're not spending much money total and it makes you happy then who cares?
"You're right," Fisheye says. "I should have set it on 'whip' or 'chop.'"
Guess you may view the game access as permanent then again the current monetary system may not be either.
As long as people trust the Steam items they are very different from any other currency though, you can exchange them for real money (on Steam in your Steam wallet but on the side say with Paypal) and you could get other games or whatever with the money.
Supposedly Steam has said before you'd be able to download your games even if they went bust or whatever, I don't know if that's worth anything but for single player games maybe that's a better deal than for fiat currency.
Steam has pretty decent security and they try to make it safe and as-long as they know what's right I guess they can revert the actions, something which is harder to do if you're robbed IRL.
I lost my bicycle. I haven't lost my Steam items. The bicycle was worth more and easier to take.
Man, the concept of Chinese WOW gold farmers must really blow your mind.
Gamers are notoriously bad with money, and think their virtual possesions will define their personality. That's all there is to it.
Eat the rich.
Man, the concept of Chinese WOW gold farmers must really blow your mind.
Well, no. It doesn't blow my mind that most people spend most of their time doing stupid shit. I go outside and see it.
"You're right," Fisheye says. "I should have set it on 'whip' or 'chop.'"
It was a PITA. Had to go through the recovery process and change all my passwords, before I could play DOTA2 again... All for what, so some Russian teen can root through my account, and see I have nothing worth stealing? This is the first time it has happened to me, but I have had about 5 or 6 recent attempts prior to that. Lame. Seems to be getting worse. If Steam wants to continue growing, they are going to have to deal with this issue.
Cyka blyat!
And this is where Valve's stance on VAC being zero tolerance, permanent, and in place regardless of if your account was hijacked or not needs to be addressed. You get a VAC ban, you're not going to be able to participate in the Steam community or any online game in any fashion without being harassed endlessly, or repurchasing all games on a new account. Seen it time and time again even if VAC is not relevant to whatever discussion is at hand. I can only hope that with all the security I've set up on my Steam account, it never gets hijacked and exploits to get around all that are never found, as I'd never be able to afford to repurchase all my games on a new account.