If you use the Steam escrow system, be wary that researchers have spotted cybercriminals using a phony CSGO Shuffle domain to deliver malware.

Jovi Umawin, a malware intelligence analyst at Malwarebytes Labs, said: "Links such as these are most commonly shared in Steam IM Chat, often with the promise of additional freebies for those who click the supplied URL."

According to a Dec. 9 Malwarebytes blog post, criminals have designed the fake site to mimic a popular betting site used by steamers and Counter-Strike: Global Offensive (CS:GO) players to trade item skins.

Researchers retrieved two malware samples from the campaign and identified them as “Backdoor.NanoCore” and “Escrow.exe.”

The post said the Steam Movile app is the only application that Steam users have to download and that additional programs that users are encouraged to install from unofficial third-party destination sites should be avoided.

"Gamers most at risk from this malware are those who frequently trade in virtual goods, specifically CS:GO gun skins which are hugely popular and can sell for hundreds of dollars," Umawing said.

Source: SCMagazine