A free game on Steam called Beyond The Dark contained hidden malicious software.
The game originally started as a simple title named Rodent Race. Someone hijacked the developer’s account and quickly changed the name, images, and other details. This tricked Steam, which does not verify updates.
The malware was hidden in a file called UnityPlayer.dll. The game often crashes when run, but the malware keeps operating in the background.
It searches for crypto wallet extensions in Chrome, such as MetaMask, connects to a malicious server, and downloads tools to steal passwords, browser data, and cryptocurrency. Some reports say it may also steal Roblox information.
YouTuber Eric Parker discovered the malware and made a video about it. Steam then removed the game completely.
If you downloaded or played it:
>Delete the game immediately.
>Run a full virus scan with updated antivirus software.
>Change all important passwords, especially for email, browsers, and crypto accounts.
>Check your crypto wallets for missing funds and transfer any remaining balance to a new secure wallet on another device.
This is a common tactic on Steam now
Show more
The official JDownloader site (.org) was compromised.
Attackers modified the alternative download page and replaced the Windows .exe installers as well as the Linux shell installer.
The tampered Windows files lack valid digital signatures, display fake publisher names such as Zipline LLC, The Water Team, or Peace Team, and are flagged by Windows Defender and SmartScreen as malicious.
The Linux shell installer now contains harmful code.
What remains safe:
>macOS installers
>The main JDownloader.jar file
>All existing app updates (running installations are unaffected)
>Third-party packages such as Flatpak, Winget, or Snap (these use external hosting and unchanged manifests)
The JDownloader developers have publicly confirmed the breach on Reddit and are working to restore the site.
Do not download any Windows .exe or Linux shell files directly from jdownloader. org until they post an official all-clear.
If you downloaded and ran a recent installer from the site in the past few days, run a full system scan with your antivirus and monitor for unusual activity.
Show more
Kaspersky has uncovered a backdoor embedded in the official Windows installer of Daemon Tools, a widely used disc imaging application.
Security researchers believe Chinese-speaking hackers carried out a supply chain attack that began on April 8, compromising thousands of systems.
The attack primarily targeted organizations in retail, scientific, manufacturing, and government sectors in Russia, Belarus, and Thailand.
The backdoor remains active, allowing deployment of additional malware.
Disc Soft, the developer of Daemon Tools, has confirmed it is aware of the report and is investigating with high priority.
Users who installed recent versions of the software are advised to monitor antivirus alerts and assess their risk.
Show more
US antitrust regulators poised to approve Paramount’s takeover of Warner Bros, Semafor reports
US antitrust regulators poised to approve Paramount’s takeover of Warner Bros, Semafor reports
Newly revealed court documents from an ongoing antitrust lawsuit claim that Valve once threatened to remove Rainbow Six Siege from Steam after Ubisoft tried selling the game at a lower price on its own storefront, Uplay.
According to the reports, Ubisoft introduced a cheaper “Starter Pack” version of Rainbow Six Siege outside of Steam.
Valve allegedly warned Ubisoft that the game could be removed from Steam if the pricing difference wasn’t addressed. Ubisoft changed course, and the game remained on the platform.
Show more