Hacker plants three strains of malware in a Steam Early Access game called Chemia — security company found crypto-jacking infostealers and a backdoor to install yet more malware in the future

Sometimes getting more than what you asked for is nice. Finding cash in a jacket you haven’t worn in a while, getting an extra chicken nugget at the drive-thru, discovering a hidden track on an album — those are all pleasant surprises. This one isn’t: A cyber threat intelligence firm called Prodaft revealed that “Chemia,” a game previously available via Steam’s Early Access program, shipped with three strains of malware.

“Chemia” was described on its Steam page as “a gripping survival crafting game set in a world ravaged by a catastrophic natural disaster,” which requires players to “gather resources, craft vital equipment, and navigate this hazardous world if [they] hope to survive.” The game wasn’t publicly available—Steam users had to request access to the playtest—which makes the fact that it contained malware seem even sleazier.