Click Adventure: Difference between revisions
Added conclusion |
added total amount (estimation) |
||
| Line 12: | Line 12: | ||
==Unauthorized transactions without account ownership== | ==Unauthorized transactions without account ownership== | ||
''Click Adventure'', a casual clicker game released on August 6, 2025, reportedly led to account compromises where users received emails about unrecognized Marketplace transactions for inventory items tied to the game. Affected users consistently reported that they did not own or interact with Click Adventure prior to the incidents. Losses varied, with some users reporting drains as low as $13 and others up to $205 from their Steam wallet balances. These transactions occurred without Steam Guard login alerts, suggesting a bypass of standard security protocols. | ''Click Adventure'', a casual clicker game released on August 6, 2025, reportedly led to account compromises where users received emails about unrecognized Marketplace transactions for inventory items tied to the game. Affected users consistently reported that they did not own or interact with Click Adventure prior to the incidents. Losses varied, with some users reporting drains as low as $13 and others up to $205 from their Steam wallet balances. The total amount across all account comes to a loss of ~$830. These transactions occurred without Steam Guard login alerts, suggesting a bypass of standard security protocols. | ||
The scam, uncovered by consumer rights group [https://steamcommunity.com/groups/Sentinels_of_the_Store Sentinels of the Store], involved a sophisticated network of hacked "seller" and "buyer" accounts. The developer, "Folso Dev", had reportedly been stockpiling these compromised accounts for up to nine months prior to the game's release. | The scam, uncovered by consumer rights group [https://steamcommunity.com/groups/Sentinels_of_the_Store Sentinels of the Store], involved a sophisticated network of hacked "seller" and "buyer" accounts. The developer, "Folso Dev", had reportedly been stockpiling these compromised accounts for up to nine months prior to the game's release. | ||
| Line 58: | Line 58: | ||
*Deauthorize all devices and change passwords if compromise is suspected. | *Deauthorize all devices and change passwords if compromise is suspected. | ||
== Conclusion == | ==Conclusion== | ||
The ''Click Adventure'' case underscores possible vulnerabilities in Steam's systems that enabled malicious actors to drain funds from users without triggering standard security alerts. While Valve has taken steps (removing the game), many affected users have not received recompense. Whether this incident prompts broader policy or security changes remains to be seen. | The ''Click Adventure'' case underscores possible vulnerabilities in Steam's systems that enabled malicious actors to drain funds from users without triggering standard security alerts. While Valve has taken steps (removing the game), many affected users have not received recompense. Whether this incident prompts broader policy or security changes remains to be seen. | ||