Valve’s Steam store was used to spread malware to a few users, following a hacker’s breach of several game developer accounts. The issue emerged when Valve contacted affected users. Valve has since mandated two-factor authentication for game developers on Steam, with code reception via SMS, creating controversy due to vulnerability to SIM swaps and phishing. The change goes live on October 24, 2023.

Fake VPN and streaming app drops malware that drains your bank account – Malwarebytes
Fake VPN and streaming app drops malware that drains your bank account Malwarebytes