Malware on approximately 2,000 WordPress sites hid C2 instructions in Steam profile comments using invisible Unicode. GoDaddy researchers spotted a command-and-control infrastructure for a malware campaign abusing Valve’s Steam gaming platform. The experts discovered malware on approximately 1,980 WordPress sites that fetches its instructions by reading Steam Community profile comments, where the actual payload is […]
I know DoTA’s unpopular these days but calling it malware is silly.
Just kidding, this is actually incredibly interesting and hopefully won’t mean the end of arbitrary unicode on steam profiles.