Incident Response, Malware, TDR

Fake voice chat tool spread on Steam is actually malware, researchers warn

Researchers at Malwarebytes have found another malware campaign targeting users on gaming and social networking platform Steam. As in earlier attacks, saboteurs spread the malware, called Trojan.Inject, through Steam's chat feature.

Users are lured to download the malware via chat messages that include a link: myteamvoxing[DOT]com/en/home/index. It's no coincidence, however, that the URL is similar to that of a legitimate domain, My Team Voice, that lets gamers install a voice chat tool, Malwarebytes intelligence analyst Jovi Umawing said in a blog post.

The My Team Voice app, she said, lets team members in multiplayer games communicate if a game or platform doesn't support voice chat by default.

Victims installing the spurious “team voxing” download may be vulnerable to having their Steam account hijacked, as one user reported. In December, attackers distributed malicious screensavers, or .SCR files, through Steam's chat feature. 

Get daily email updates

SC Media's daily must-read of the most current and pressing daily news

By clicking the Subscribe button below, you agree to SC Media Terms and Conditions and Privacy Policy.