Downfall, a fan expansion for the popular Slay the Spire indie strategy game, was breached on Christmas Day to push Epsilon information stealer malware using the Steam update system.
Game mod on Steam breached to push password-stealing malware::undefined
Why does the game mod have this much access?