Horror game removed from Steam after being accused of stealing passwords and browser data

The administration of Steam has removed the free horror game Beyond the Dark after malware was discovered inside the project. The game, which was marketed as a tense survival horror experience, was allegedly being used to steal passwords, browser data, and cryptocurrency wallet information from users.

Despite Steam’s moderation efforts for indie games, the incident exposed vulnerabilities in the platform’s update verification system. According to an investigation by security researcher Eric Parker, Beyond the Dark originally had an official release date of December 28, 2024, but only became dangerous recently after a change in ownership.

It was later revealed that just a few weeks ago the game had a completely different appearance and title.

• The attackers allegedly compromised the Steam account of the developers behind another game called Rodent Race.
• The project page was heavily modified: the title was changed to Beyond the Dark, while the branding, screenshots, and product description were also updated.
• Because Steam does not manually review every individual patch or update for already published games, the modified version containing the embedded malware was able to reach users without interruption.

Recall that ESL FACEIT Group recently partnered with TikTok to broadcast its esports tournaments on the platform.