Valve strengthens security measures on Steam after cyber attacks on developer accounts

Carding 4 Carders

Professional
Messages
2,730
Reaction score
1,467
Points
113
Valve introduces two-factor authentication for game developers.

After the accounts of several game developers on Steam were compromised and their games were infected with malware, Valve introduces an additional security check.

Recently, it became known about the compromise of developers ' accounts on Steam, after which malicious software was found in their games. According to Valve, fewer than 100 users had installed these games at the time the malware was added. All of them were informed by Valve via email about possible risks.

Although the attempt to use Steam to distribute malware was not particularly successful, Valve decided to take measures to prevent similar incidents in the future. Starting on October 24, game developers will be required to pass two-factor authentication before updating the main version of a released game. This is the version that is automatically installed by all players through the Steam update system.

An SMS message will be the only way to get a two-factor authentication code. Thus, Steam partners will need to register a mobile phone number to update the main version of their game. For developers who don't have a phone, Valve says they will "need a phone or other method of receiving text messages" to continue updating their products.

Valve emphasized that these additional security measures are necessary to ensure that Steam users are protected and prevent unauthorized access to developer accounts. The company also noted that this is not the only case of attempts to gain illegal access to the accounts of Steam partners.

One of the temporarily compromised games was NanoWar: Cells VS Virus. Its developer, Benoît Freslon, said that he was the victim of malware that stole his browser access tokens, giving attackers temporary access to the web services he logged in to.
 
Top