Hacker sneaks infostealer malware into early access Steam game

A threat actor named EncryptHub (Larva-208) injected HijackLoader and Fickle Stealer into the early-access Steam game Chemia to distribute info-stealing malware to players; the campaign uses Telegram for C2 and PowerShell to fetch payloads. Researchers linked the actor to previous large-scale campaigns and noted the malicious binaries run stealthily in the background, leaving the game available on Steam and raising supply-chain and platform-trust concerns.