Steam games abused to deliver malware once again

A threat actor known as EncryptHub (Larva-208) abused Steam Early Access for the game Chemia to embed a Trojan downloader that established persistence and delivered multiple information stealers and loaders (Fickle Stealer, Vidar, HijackLoader), exposing users to credential and cryptocurrency theft; the report provides domains, file hashes, detection advice, and recommended user mitigations.