“I thought it was a Steam game”… Malicious code found planted on users’ PCs

Recent developments have unveiled a troubling incident involving ‘Beyond the Dark,’ an indie game that was made available for free on Steam, a prominent platform for PC gaming. Released on December 29, 2024, the game raised eyebrows from the outset. While its Steam store page showcased screenshots and videos typical of a first-person horror game, the accompanying description claimed it was a “turn-based strategy game inspired by chess.” This incongruity, coupled with assets that appeared hastily generated by artificial intelligence, painted a picture of a subpar indie offering.

Unmasking the Deception

The true nature of ‘Beyond the Dark’ came to light thanks to tech YouTuber Eric Parker, who shared his findings in a video titled ‘The Truth About ‘Free’ Steam Games That Steal Your Data’ on the 18th. Parker identified the game as an ‘asset flip,’ a term used to describe titles created by merely combining existing commercial assets. More alarmingly, he revealed that the game served as a vehicle for distributing malware to unsuspecting users.

According to Parker’s investigation, the malware cleverly evaded security measures by embedding itself within a DLL file that activates upon the game’s execution. This malicious software aims to pilfer users’ cryptocurrency wallet information and Roblox account credentials, while also featuring a backdoor function that allows the download and installation of additional harmful programs. Parker strongly advised users against downloading the game and urged them to steer clear of any associated links.

This incident is not an isolated one; the gaming community has witnessed similar occurrences in the past. In September 2025, a free platformer game named ‘Blockbusters’ was implicated in a malware distribution scheme that resulted in the theft of approximately 0,000 in cryptocurrency. In light of these events, security experts are emphasizing the importance of exercising caution when considering the installation of free games, particularly those that exhibit signs of being hastily produced using generative AI or commercial assets.

In response to the backlash following Parker’s exposé, Valve, the company behind Steam, acted swiftly to remove ‘Beyond the Dark’ from its platform, blocking downloads within a day of the revelations.

‘Beyond the Dark,’ which was originally released as a paid title before recently switching to free-to-play ©SteamDB

This article was originally written in Korean and translated with the help of NC AI. It was then edited by a native English-speaking editor. All AI-assisted translations are reviewed and refined by our newsroom.

AppWizard
"I thought it was a Steam game"... Malicious code found planted on users' PCs