Steam Stealer Malware Becomes Extremely Sophisticated, Remains Very Cheap (securelist.com)
An anonymous reader writes: During the past years, malware aimed at stealing game inventory items from Steam accounts and logging Steam login credentials has become extremely sophisticated, but [has] remained at a lower-tier pricing range on underground hacking forums, rarely going above $10, never over $30. Valve says that it receives 77,000 complaints a month for hacked accounts, and Steam Stealers are responsible for most of them. [The] most targeted game is Counter-Strike: Global Offensive, while Kaspersky Lab says that most of the cyber-gangs behind these malware families are of Eastern European origin, mostly Russian.
There was a time where people faked their accounts being hi-jacked as a way of duplicating really expensive skins. They would then turn around and sell the skin which was scammed on a site like OpSkins and then keep the duplicated skin in their main account and still play with it. Not anymore though, Steam wised up and made some changes.
Money goes into steam games/DLC money doesn't come back out. Valve can just reverse all exchanges, so even if you broker the trade of one game for another, it will all get reversed after a complaint.
The only way to make money is to convince someone to do an under-the-table trade, which most people know is pretty risky on its own.
Wish they'd shut off the annoying nag screen that asks for your SMS phone number.
Of which I do not own and never will - Steam support refuses to help, there's no phone number to call. And if you put in a support case, they just ignore you.
Steam's gone really downhill.
_ _ _ Go for the eyes Boo! GO FOR THE EYES!
I know there are a lot of OSX users out there that find it too difficult and/or inconvenient to install AV.
Laws are rules for the court, but merely a bottom bar to hit for life. Think beyond laws in your actions always.
Without Flash, Adobe or Microsoft installed on their machines and without running external 3rd-party software, what do OS X users have to be afraid of?
I'm just saying that I have seen many people comment that they use OSX because otherwise they would have to install AV, and it is too difficult for them.
Laws are rules for the court, but merely a bottom bar to hit for life. Think beyond laws in your actions always.
People aren't cracking into Steam accounts to play the games on them: they're actually looking to steal their game items, often to sell for money.
I use steam and really can't find the will to care about this. Granted I don't play any games that use steam marketplace stuff in an important way. The most I use the market for is completing holiday badges for personal amusement. There is never more than a couple dollars in my balance and the items in my inventory are hardly worth posting in the market for sale.
They arent wrong. Most AV software bothers the hell out of you with notifications and constantly tries to frighten you. Its not the installing that is difficult, its living with the software day-to-day that pisses people off.
Good-bye
Because of uneducated users. The same reason why people get caught by cryptoware.
Like money? The vast majority of people's money is just bits in a database.
Good-bye
It isn't stealing. Maybe just copyright infringement. Anyhow, those players should give away their game items. They can make their money performing live and selling tshirts at their concerts.
Exactly this. I'm a programmer. I can install AV software easily. But, I've never used a machine with it installed where it doesn't become a giant pain in the ass with all the notifications and slow downs and what not. I just stick to Unix-like OSes, use ad-block and noScript, and hope that the malware authors will target easier targets. It's a gamble, but there are pros and cons and for me the pros of not running it out weigh the cons of not running it (plus I back up my important files to multiple off-site facilities on a daily basis that, as far as I've read, the ransomware programs can't get to).
When companies such as Steam can back their virtual products with the same security and universally guaranteed value as federal currency, perhaps I will change my mind. So far it seems to take more than a $10 warez for a sleezeball in Russia to take money out of my personal bank account and make it available for their own personal use.
Laws are rules for the court, but merely a bottom bar to hit for life. Think beyond laws in your actions always.
Nah. They are digital items. Anything digital can be copied freely. That is why DRM doesn't work.
It's ok to play with the standard skins and not have any special ones.
I paid a whole dollar for Ring Runner, a 2d space sim that is really fun to play.
I don't care if it is virtual. I don't care if I don't own it. I don't care if Steam might do something wonky I lose access. It cost me basically nothing and is lots of fun.
No, we're talking about something even more ephemeral than a Steam game. We're talking about items for Steam games. People are not only spending money to buy games, they're spending money to buy items for their characters in these games. And they have enough monetary value to be worth stealing, so there's malware for that. Is there a number for that rule?
I personally think that buying items for games when you've already paid for the game or when the game is a moving target and the value of what you've paid actual money for can vary wildly in the future based on rebalancing is a bit daft, but if you're not spending much money total and it makes you happy then who cares?
"You're right," Fisheye says. "I should have set it on 'whip' or 'chop.'"
Right now the one that is not a PITA on Windows is BitDefender.
In case anyone cares. AVG, Avira and Avast! are all nagware, and AVG has an overzealous protection regime that sometimes evaporates files you really would have liked to have restored from the "virus vault" (ugh)
"You're right," Fisheye says. "I should have set it on 'whip' or 'chop.'"
Without Flash, Adobe or Microsoft installed on their machines and without running external 3rd-party software, what do OS X users have to be afraid of?
Bold mine. So you're depending on the user to not go around a security feature to get a shiny app. But these "Steam Stealers" mainly work on the principle of fooling users into installing trojans. Even OS X users like forbidden fruit, which is why you can find instructions on how to install 3rd party apps in OS X, and isn't it funny how they mention Steam?
http://www.imore.com/how-insta...
"As a rule, please make sure the web site you're downloading from is legitimate: Make sure it's the vendor's actual site, for example, or go with a third-party service you trust (like Steam or Macgamestore.com for downloading games, for example)."
Guess you may view the game access as permanent then again the current monetary system may not be either.
As long as people trust the Steam items they are very different from any other currency though, you can exchange them for real money (on Steam in your Steam wallet but on the side say with Paypal) and you could get other games or whatever with the money.
Supposedly Steam has said before you'd be able to download your games even if they went bust or whatever, I don't know if that's worth anything but for single player games maybe that's a better deal than for fiat currency.
Steam has pretty decent security and they try to make it safe and as-long as they know what's right I guess they can revert the actions, something which is harder to do if you're robbed IRL.
I lost my bicycle. I haven't lost my Steam items. The bicycle was worth more and easier to take.
Man, the concept of Chinese WOW gold farmers must really blow your mind.
Gamers are notoriously bad with money, and think their virtual possesions will define their personality. That's all there is to it.
Eat the rich.
Man, the concept of Chinese WOW gold farmers must really blow your mind.
Well, no. It doesn't blow my mind that most people spend most of their time doing stupid shit. I go outside and see it.
"You're right," Fisheye says. "I should have set it on 'whip' or 'chop.'"
It was a PITA. Had to go through the recovery process and change all my passwords, before I could play DOTA2 again... All for what, so some Russian teen can root through my account, and see I have nothing worth stealing? This is the first time it has happened to me, but I have had about 5 or 6 recent attempts prior to that. Lame. Seems to be getting worse. If Steam wants to continue growing, they are going to have to deal with this issue.
Cyka blyat!
The only way to protect a computer against trojans is to educate the users of those computers.
And this is where Valve's stance on VAC being zero tolerance, permanent, and in place regardless of if your account was hijacked or not needs to be addressed. You get a VAC ban, you're not going to be able to participate in the Steam community or any online game in any fashion without being harassed endlessly, or repurchasing all games on a new account. Seen it time and time again even if VAC is not relevant to whatever discussion is at hand. I can only hope that with all the security I've set up on my Steam account, it never gets hijacked and exploits to get around all that are never found, as I'd never be able to afford to repurchase all my games on a new account.