Steam Bolsters Security with SMS Confirmations Amid Malware Scare
Recently, the Steam accounts of several game developers were compromised by hackers, who subsequently disseminated malicious software through game updates.
According to Valve, fewer than 100 Steam users installed these malware-infested games, and they have already been notified via email.
Notice sent to impacted players (@SteamDB)
Although the hackers’ attempt to distribute malicious software through Steam wasn’t largely successful, Valve has instituted significant measures to prevent such incidents in the future. Starting from October 24th, game developers, before updating the default branch of a released game (i.e., the version that Steam would automatically provide to most of the players who have installed that game), must undergo Two Factor Authentication.
“As part of a security update, any Steamworks account setting builds live on the default/public branch of a released app will need to have a phone number associated with their account so that Steam can text you a confirmation code before continuing,” reads Valve’s announcement.
“The same will be true for any Steamworks account that needs to add new users. This change will go live on October 24, 2023, so be sure to add a phone number to your account now.”
“We also plan on adding this requirement for other Steamworks actions in the future.”
Text messages will be the sole method for receiving the two-factor authentication codes, hence developers are mandated to register a phone number, to be utilized when they intend to update the primary release of their games.
Steam partners will also be required to use SMS verification to add new users within their organization, and Valve has plans to implement two-step security checks for other backend operations on Steam in the near future.
