
The image or the profile picture helps in the distribution of malware to an infected computer without getting detected by any antivirus software. That's because the malware is inactive until it's decrypted by a separate malware downloader. So, if you are using Steam or have downloaded or accessed an image from Steam, this does not affect your computer. The profile picture or the image is not the malware itself, but it is a container for the malware. Related: What Is Malware and How Does It Work? This value is a part of the EXIF data that exists in an image to help you identify the camera used and other related information. Technically, the PropertyTagICCProfile value of an image is changed to encrypt and hide the malware, which normally stores information to help printers detect the colors of an image. SteamHide is a form of malware that hides within Steam profile picture's metadata, warns security company GDATA. And now, the attackers are targeting the popular gaming store Steam to hide malware using the profile pictures. But are you at risk if you use Steam? What if you download an image from Steam? You may end up downloading malware via email attachments or software packages from any website.Įven platforms like Slack and Discord are being used as a medium to spread malware. Attackers always find new ways to distribute malware.
