Steam removes the game Beyond The Dark from the system.

Steam has successfully removed the game Beyond The Dark from the system after the malware was found.

According to a report by the website Cyber Insider, one Youtuber named Eric Parker has reviewed the free video game "Beyond The Dark," which is claimed to be a Multi-Player horror video game from an indie manufacturer that has been distributed for free on the Steam platform. After reporting from the channel that the game itself is suspicious that it needs to be verified, YouTuber has seriously investigated the video game in a variety of ways, so that it has detected a number of abnormalities.

The first is that the video game has not been used by the name "Beyond The Dark" since the beginning. According to a review through Steam's database, SteamDB found that the game was initially named Rodent Race before it was renamed "Beyond The Dark" in May. There was also a change in the data of the video game itself, such as Metadata, Artworks, and the details of the video game, which led to the assumption that the first name used may be to emanate the Steam monitoring system.

Later, when doing in-depth analysis with the Forensic and System Monitorting Tools in conjunction with the Virtual Machine, it was discovered that although the game itself had some elements that did not look unusual, such as a playback screen that showed that it was created with the basic Game Engine Unity and Gameplay, it was found to have more external contact as soon as the game was run.

Then, after reverse engineering, the game itself eventually led to a suspicious discovery: a DLL file with malicious code embedded inside the video game itself. The malware in the DLL file format was found by YouTube to have the ability to profile the victim's machine by collecting important information related to the identification of the victim machine, storing the MAC Address, storing the extension information attached to the Chrome web browser, and contacting the C2 or Command and Control server through the API to receive the order. Next, in the Chrome Extension scan, YouTube found that a scan focused on a Crypto Wallet extension like MetaMask showed that the person behind it might want to steal the victim's money.

In addition, YouTube found that the malware is supported to download a second malware file (Secondary Payload) to install on the victim machine. Not only that, the malware also has the support to download the Component component of the malware as a zip compressed file to install it to enhance the malware's capabilities and claws.

Valve has not commented on any such malware latent video game detection, but has successfully removed the problem video game from the directory after receiving reports from players and a group of cybersecurity researchers.

# Trending # Lemon 8 Howtoo # lemon 8 diary # Beyondthedark # freedomhack