Fake Steam Desktop Authenticator App distributing DarkCrystal RAT

**Executive summary:** A campaign impersonating the legitimate Steam Desktop Authenticator distributes a malicious desktop application via cloned and typosquatted websites; the fake app disables Windows Defender and delivers the DarkCrystal RAT (DCRAT). The report includes multiple malicious domains, registrar/AS/registrant details, batch script and RAT sample hashes, and links to VirusTotal and URLScan evidence for analysts to consume.