The BBC reports that users of the popular video streaming website Twitch.tv are attacked on the site which can lead to the buying, selling or trading of virtual user items on the gaming platform Steam.
Attacks are carried out via links that get posted in chat on the site according to
F-Secure which reported about it first. The messages invites users to participate in weekly raffles for a chance to win virtual items for the game Counter-Strike Global Offensive, the most recent version of the popular Steam game.
Users who click on those links load a Java program which asks them for information. While it is unclear if those information are processed at all, it is clear that the program drops malicious software on the user system which allows the attacker to perform a series of commands including adding new friends on Steam, buying items with user money, sending trade offers, selling items on the market and accepting trade transactions.
