The streaming service Twitch is being used to spread malware via its chat feature to users of the digital video game store Steam.
Victims are invited to participate in a raffle to win digital items for games such as Counter-Strike: Global Offensive, with malware being dropped to their computer once they have entered their details into a website.
"Do not click the ‘csgoprize’ link in chat," the company’s support team tweeted. "This is a phishing attempt to install malware and compromise your Steam account."
"We will work to block that link, but be aware that variants could appear. In general, you should be wary of any links in chat."
The malware is said by security firm F-Secure to be able to empty users’ Steam wallets, as well as sell previously bought digital items at a discounted price on the community market, where players can trade items with one another.
"Being able to sell uninteresting items will allow the attacker to gather enough money to buy items that he deems interesting," F-Secure said. "The interesting items are then traded to an account possibly maintained by the attacker."
The company suggested that Steam introduce further protections for customers when trading items with newly added contacts, though the owner Valve already has controls to prevent unauthorised trading from new machines.
