Warning for Steam users: malicious software via PowerShell
Intelligence Summary
- Steam users are warned about a scam that tricks them into downloading malicious crypto-mining software via PowerShell commands.
Briefly
- Some Steam users are being tricked into downloading malicious cryptocurrency-mining software.
- The software is disguised as a Windows optimization app and uses administrator rights to bypass security software.
- The malware is difficult to remove, causing ongoing problems for victims.
GAME-scanner analysis
The recent discovery of a scam targeting Steam users is concerning. Attackers are using social engineering by instructing users to run specific PowerShell commands. This leads to the installation of XMRig, a cryptocurrency miner that poses as a legitimate application. Using administrator rights allows the malware to bypass security software such as Windows Defender, increasing the chances that victims will install it without realizing what it is. This is not only a threat to individual users, but could also have broader implications for the integrity of the Steam platform.
What does this mean for players?
For players, this means being extremely cautious with instructions found on Steam forums. It is crucial to verify that any suggested fix is legitimate before running PowerShell commands. The risk of installing malicious software can lead to loss of personal data and worse system performance. Players should also stay up to date with Steam announcements about security measures and scams.
Timeline
30 July 2026: Reports begin circulating about a scam tricking users into installing malicious software via PowerShell commands.