Steam Community Profiles abused as C2 network in new WordPress malware infection campaign

Logo of Steam with game covers in the background.

• Malware hides payload in Steam Community comments
• WordPress sites used to host backdoors
• Nearly 2,000 sites compromised since July

Security researchers from GoDaddy found a cheeky new malware campaign that used comments made by Steam Community accounts as command-and-control (C2) infrastructure.