Super interesting method of entry. It makes a lot of sense as an attack vector. Steam doesn’t have a very rigorous process for checking what they offer on their platform & most customers don’t check their games before running them.

I’m honestly suprised it hasn’t happened more frequently. I wonder if the amount of press this particular incident is getting will cause steam to change their process for publishing games.