{"id":99,"date":"2025-02-19T16:45:37","date_gmt":"2025-02-19T16:45:37","guid":{"rendered":"https:\/\/www.techrepublic.com\/?p=4291949"},"modified":"2025-02-19T16:45:37","modified_gmt":"2025-02-19T16:45:37","slug":"steam-malware-alert-piratefi-game-spreads-vidar-infostealer","status":"publish","type":"post","link":"https:\/\/blog.tecnoartesanos.com\/index.php\/2025\/02\/19\/steam-malware-alert-piratefi-game-spreads-vidar-infostealer\/","title":{"rendered":"Steam Malware Alert: PirateFi Game Spreads Vidar Infostealer"},"content":{"rendered":"

Earlier this month, researchers discovered that a free-to-play game called PirateFi was distributing the Vidar information-stealing malware to users on gaming platform Steam. From Feb. 6-12, as many as 1,500 users downloaded the game before Steam removed it from the platform.<\/p>\n

The situation should be a wake-up call for all gamers.<\/p>\n

\"PirateFi
PirateFi: Before<\/figcaption><\/figure>\n
\"Steam
PirateFi: After<\/figcaption><\/figure>\n

<\/span>What Is PirateFi?<\/span><\/h2>\n

PirateFi is an immersive survival game involving gathering food and supplies, crafting tools and weapons, and building bases. The game can be played in single-player and multiplayer modes. It received a 9\/10 rating and several glowing reviews.<\/p>\n

While ratings and comments can be fabricated to boost engagement, it looked like PirateFi was on its way to becoming a major hit among gamers, as several people downloaded the game in the short time it was on Steam\u2019s marketplace.<\/p>\n

\"PirateFi
Steam Downloads of PirateFi<\/figcaption><\/figure>\n

However, gamers were about to find out that PirateFi wasn\u2019t the only thing they downloaded. Users started receiving messages on Telegram about an in-game chat moderator job that paid $17 an hour. The idea of getting paid to play and interact in the game \u2014 something they probably would\u2019ve done for free \u2014 sounded too good to be true. One user in particular found this to be suspicious and did some digging.<\/p>\n

\"Chat
Chat log screenshot.<\/figcaption><\/figure>\n

First, he noticed the cadence of the messages. He saw that the replies from the \u201cdeveloper\u201d were sent precisely 21 seconds after the previous message. If you\u2019re not paying attention, you will probably miss that detail. However, message replies that are all evenly spaced are clear indicators of a fake and automated account \u2014 and you\u2019re more than likely talking to a chatbot.<\/p>\n

And that\u2019s precisely what was happening: The chat moderator job didn\u2019t exist.<\/p>\n

The AI chatbot offered gamers the role to get them to download and install the game. So why lie about a job? Was it a malicious marketing ploy to boost their download numbers and popularity on Steam? Or was it something more sinister like social engineering or a phishing attack to steal user information or worse?<\/p>\n