Valve just pulled a malicious game demo spreading info-stealing malware from Steam

A magnifying glass on top of the Steam logo in a web browser
(Image credit: Shutterstock)

Even when you’re downloading one of the best PC games from Steam you need to be careful, as they can be used to infect your PC with malware.

After a game called PirateFi was released and then quickly taken down last month after it was found to be distributing malware, a new malicious game demo spreading info-stealing malware has been discovered on Valve’s game store.

As first spotted by TheGamer, the game in question — Sniper: Phantom’s Resolution — was reportedly set to release in the second half of this year. However, it has now been delisted from Steam after its demo installer infected the PCs of those who downloaded it with malware

Here’s everything you need to know about this latest malware threat on Steam including some tips and tricks to help keep your gaming PC safe from hackers and viruses.

Red flags galore

A screenshot of the Steam listing page for the game Sniper Phantom's Resolution which was recently taken down after a demo for the game was found distributing malware

(Image credit: Internet Archive)

Sniper: Phantom’s Resolution was still listed on Steam earlier this week and interested players could wish list the game ahead of its release. However, they couldn’t download the game’s demo directly from Steam, which was the first major sign that something was off.

If you’ve used Steam before, you know that downloading games from the service is done entirely in Valve’s PC app. Sure, you might download a mod or a fix for a particular issue on an external site but with games themselves, everything is done within Steam itself.

Oddly enough, the game’s listed developer Sierra Six Studios went out of the way to warn gamers about not downloading the demo via external websites and to download it via Steam directly. However, they weren’t actually able to download via Steam at all which makes this warning even stranger.

Sniper: Phantom’s Resolution’s Steam page did have a link to the webpage for its developer before it was taken down. Oddly enough, this site had another link for a free demo that players could download to try out the game before release. Clicking on this link took potential players to an external GitHub repository where they could then download the game’s installer.

In a Reddit post, a user warned others early on that Sniper: Phantom’s Resolution looked suspicious. From promotional art that looked stolen from other games to the fact that you couldn’t download anything from the game’s Steam page, there were plenty of red flags that this half-backed game was one to avoid.

Another oddity spotted by this Reddit user was the fact that the game’s domain was registered a week before the demo became available to download. Typically, game developers register domains for upcoming titles years in advance or at least several months before getting a title approved via Valve and listed on Steam.

To top it all off, in an edit to their post, the Reddit user explained that they first heard about this game via a random message on Discord from someone they didn’t know. Hackers and other cybercriminals love to use Discord in their phishing scams and other attacks and a random message from an unknown sender is about as big of a red flag as you can get.

In order to see if the original poster was onto something, another user downloaded the demo and unpacked it only to find that the main executable was suspiciously labeled as “Windows Defender SmartScreen.exe.” There were other malicious files inside the demo’s installer too including a privilege escalation utility and tool used to intercept browser cookies among others.

How to keep your gaming PC safe from malware

A PC gamer using an RGB gaming keyboard and a Logitech gaming headset.

(Image credit: Shift Drive/Shutterstock)

If you did happen to download and install the malicious demo for this game, you first need to uninstall it and then use either Microsoft Defender which is built into Windows or the best antivirus software to run a full scan of your system.

Fortunately, unlike with PirateFi last month, Valve has yet to weigh in and recommend something as drastic as a full PC reset, though that’s always a great last resort when dealing with a malware infection.

Just like we’ve seen with the best Android phones, sticking to official stores instead of downloading games and apps from unofficial sources online just isn’t good enough anymore. For this reason, you want to be extra careful when installing any new software — or in this case games — on your PC.

Before downloading any game, read reviews, look at ratings and always remember, if it seems too good to be true it probably is. Pirating software or games is an easy way to end up with a nasty malware infection, too, but the same thing can be said for cheats, hacks, mods and other add-ons. Unless you know what you’re doing and go to reputable sites like Nexus Mods, you’re going to want to avoid downloading unofficial add-ons for your games. And if you’re an older gamer with teenagers, this is definitely a discussion you’re going to want to have with them too.

In the same way that it’s often best to avoid pre-ordering a game and instead wait for reviews before deciding to pick it up, you definitely don’t want to download the hot new game or mod that everyone — or in this case a stranger on Discord — is talking about online. Playing the long game and being a patient gamer won’t just save you money, it could also prevent your PC from getting infected with a virus.

Hackers and other cybercriminals will often use a service or even a product’s popularity to gauge whether or not it’s worth targeting its users or a company’s customers. Case in point, years ago, Mac malware was almost impossible to find and now, it’s everywhere and becoming an even greater threat.

We’ve now seen two malware campaigns targeting gamers on Steam and chances are, they won’t be the last ones. However, if you practice good cyber hygiene, keep a level head about you and think before you click or download, you should be able to keep your gaming PC and your data safe.

More from Tom's Guide

TOPICS
Anthony Spadafora
Managing Editor Security and Home Office

Anthony Spadafora is the managing editor for security and home office furniture at Tom’s Guide where he covers everything from data breaches to password managers and the best way to cover your whole home or business with Wi-Fi. He also reviews standing desks, office chairs and other home office accessories with a penchant for building desk setups. Before joining the team, Anthony wrote for ITProPortal while living in Korea and later for TechRadar Pro after moving back to the US. Based in Houston, Texas, when he’s not writing Anthony can be found tinkering with PCs and game consoles, managing cables and upgrading his smart home. 

You must confirm your public display name before commenting

Please logout and then login again, you will then be prompted to enter your display name.

Read more
A magnifying glass on top of the Steam logo in a web browser
Valve recommends a full PC reset after malware-infected game discovered on Steam
A laptop displaying the Chrome logo
Don't click this — malicious ads impersonating Google Chrome spreading dangerous malware
A hacker typing quickly on a keyboard
Hackers are posing as Apple and Google to infect Macs with malware — don’t fall for these fake browser updates
Green skull on smartphone screen.
Malicious Android apps with 60 million installs bombarding phones with ads and phishing attacks — how to stay safe
Reddit logo and Reddit logo on phone
Hackers have created hundreds of fake Reddit sites to spread info-stealing malware
Mobile malware
New malware uses infected VPN apps to take over your device — here's how to stay safe
Latest in Online Security
A magnifying glass on top of the Steam logo in a web browser
Valve just pulled a malicious game demo spreading info-stealing malware from Steam
MacBook Pro 2023
New Mac attack is tricking users into thinking their computer is locked — how to stay safe
An open lock depicting a data breach
Half a million teachers hit in major data breach with SSNs, financial data and more exposed — what to do now
Green skull on smartphone screen.
Malicious Android apps with 60 million installs bombarding phones with ads and phishing attacks — how to stay safe
Malware
Dangerous new password-stealing trojan automatically reinstalls itself on infected PCs
An FBI agent typing on a computer
FBI issues warning to millions of Americans to avoid these websites that can steal your passwords and banking info
Latest in News
A magnifying glass on top of the Steam logo in a web browser
Valve just pulled a malicious game demo spreading info-stealing malware from Steam
Lewis Hamilton of Great Britain and Scuderia Ferrari looks on during Sprint Qualifying ahead of the F1 Grand Prix of China at Shanghai International Circuit in Shanghai, China, on March 21, 2025. (Photo by Song Haiyuan/Paddocker/NurPhoto via Getty Images)
How to watch F1 Chinese GP 1 2025 online without cable – Sprint race, Qualifying
NYTimes Connections
NYT Connections today hints and answers — Saturday, March 22 (#650)
Nintendo Switch 2
Nintendo Switch 2 — 7 biggest questions that need answers at Nintendo Direct April 2
iPhone 17 Air render
iPhone 17 Air — new survey could be bad news for Apple's super thin iPhone
Segway g30lp
Segway recalls 220,000 electric scooters - what to do if yours is on the list