Household-friendly sport Rodent Race has had its Steam itemizing hijacked by crypto-stealing malware masquerading as an indie horror sport. The sport has now been delisted from Steam by Valve after a fan investigation.
After being requested to analyze indie horror sport Past The Darkish, YouTuber Eric Parker downloaded the free-to-play title on a Digital Machine to see if warnings of it being malware had been warranted. After an investigation – which may be seen in full on his YouTube channel – he concludes that it’s malicious. A full breakdown of the investigation may be seen on malware evaluation web site Any Run.
When put in and performed, Past The Darkish seems to steal credentials for any cryptocurrency wallets related to the consumer’s machine or internet browser. Consequently, visiting Past The Darkish’s Steam web page now will reveal that it has been faraway from Steam by Valve.
SteamDB exhibits the app’s changelist, the place we will see that the sport was beforehand titled Rodent Race, and had all of its info modified in early Could. Beforehand listed writer hyperg8 has little to no on-line footprint.
One of many few examples of Rodent Race gameplay – which we discovered through the Rodent Race X account – is posted on YouTube by the channel diamond palms. Looking for writer hyperg8 additionally reveals an X account devoted to crypto, however there’s no proof that both of these crypto-themed accounts is said to the unique writer. Likewise, there’s no proof that the Rodent Race developer was really hacked.
Utilizing the Wayback Machine, we will see that the unique Rodent Race web page featured an AI-generated content material disclosure, stating: “Used KI to generate all sport artwork and logos and manually modified it.” The identical disclosure stays on Past The Darkish.
Rodent Race solely peaked at only one concurrent participant at launch, in keeping with SteamDB, however rebranding because the free-to-play Past The Darkish noticed that rise to 5 concurrent gamers.
Most suspiciously, the sport acquired a string of constructive evaluations from Could 7 to Could 18, earlier than unfavourable evaluations from involved Steam customers took the sport’s score right down to Blended, at which level Valve eliminated the sport.
Valve moved rapidly to take away the sport, but it surely does increase considerations about security on the normally dependable PC platform.
