Avast Threat Labs experts discovered that Steam was infected with a dangerous virus to modify the game Dota 2. This was reported by BleepingComputer.

According to the company’s report, four mods for the popular online game Dota 2 were found on the Steam store. In each of the mods, a virus was found that is used to execute arbitrary system commands, create partner programs and send HTTP GET requests. . “This backdoor allows execution of any JavaScript code received over HTTP, giving an attacker the ability to both hide and modify the exploit code at will”– noted Avast expert Jan Wojtešek.

According to experts, the attacks were carried out through the CVE-2021-38003 vulnerability, which was patched in October 2021. However, Dota 2 users who do not install the necessary patches may be attacked due to this exploit.

Avast representatives reported the issue to Dota 2 developer Valve, which fixed the vulnerability and removed the mods from the Steam store. According to Valve, the attackers managed to infect about 200 players’ computers. “Anyway, we can say that this attack was not very large-scale”– Finished Wojtešek.