Back to news
An FPS studio pulled its game from Steam after it got caught linking to malware disguised as a demo, but the dev insists it was actually the victim of a labyrinthine conspiracy
@Source: pcgamer.com
Skip to main content
PC Gamer THE GLOBAL AUTHORITY ON PC GAMES
Search PC Gamer
View Profile
Movies & TV
Gaming Industry
PC Gaming Show
Newsletter Signup
Community Guidelines
Affiliate Links
Meet the team
About PC Gamer
PC Gamer Magazine Subscription
Why subscribe?
Subscribe to the world's #1 PC gaming mag
Try a single issue or save on a subscription
Issues delivered straight to your door or device
From£35.99View
Monster Hunter Wilds
Nvidia RTX 5090
Marvel Rivals
An FPS studio pulled its game from Steam after it got caught linking to malware disguised as a demo, but the dev insists it was actually the victim of a labyrinthine conspiracy
Ted Litchfield
22 March 2025
I thought this one was going to be simple when I first looked into it.
When you purchase through links on our site, we may earn an affiliate commission. Here’s how it works.
(Image credit: Valve)
First reported by TheGamer, a Steam listing for a game called Sniper: Phantom's Resolution has been pulled from the storefront by the developer after players discovered malware being distributed as a "demo" from the dev's official website. Though the site had a link on Steam, the malware was not distributed through Steam itself like last month's PirateFi fiasco.
The case against developer Sierra Six seems almost airtight, but someone purporting to be one of the developers has surfaced on Reddit to claim that they were set up, and that their domain was hijacked before they had the chance to secure it.
Game listed on steam has a 'demo' that is a virus. from r/pcgaming
Occam's Razor would have Sierra Six as a bad actor attempting further social engineering, but it's not impossible that it actually is caught up in some kind of Philip K. Dickian nightmare of digital impersonation.
You may like
A web3 free-to-play survival game found to be a front for installing malware on your PC has finally been removed from Steam
'A big scam company just stole my whole game': A Backrooms indie dev has been forced to seek legal help after someone took their game off Steam and uploaded it to the Nintendo Store
Sniper: Phantom's Resolution first popped up on Steam at the end of December last year, and was removed from the storefront on March 20 according to SteamDB. This was not a Valve moderation decision: The changelog for Sniper shows the message "app_retired_publisher_request." This is in contrast to the Web3 game PirateFi, which was removed from Steam by Valve last month.
On March 16, user Feral_Wasp called out Sniper: Phantom's Resolution in a post on the PC gaming subreddit. Feral_Wasp pointed out that the Steam page contained a link to the developer's website and a supposed demo of the game, with scuttlebut being that the "demo" was actually malware.
(Image credit: Sierra Six Studios)
You can still see this thanks to the WayBack Machine: Sierra Six's username on Steam is sierrasix.dev, and the "Official Website" widget on the page links to the domain "sierrasix.dev."
User meatbent3 decided to pound the pavement and get the skinny on this "demo," which appears to have been an absurdly malicious and sophisticated "infostealer" virus that would launch a multipronged assault on your PC when run. Here's the breakdown:
The biggest gaming news, reviews and hardware deals
Keep up to date with the most important stories and the best deals, as picked by the PC Gamer team.
Contact me with news and offers from other Future brandsReceive email from us on behalf of our trusted partners or sponsorsBy submitting your information you agree to the Terms & Conditions and Privacy Policy and are aged 16 or over.
It had a file structure that superficially resembled a Unity game, but was not a game.
The demo contained a .exe to run admin privilege programs via command line.
It opened a browser, potentially to hijack cookies.
The program ran network traffic analysis and interception tools, as well as a number of difficult-to-detect programs with its command line admin privileges.
It also created a malicious startup task to run every time the PC would boot.
Meatbent3 characterized it as a "new and clever" example of malware, and advised anyone who ran the program to "remove the files it created and change every password for every account you have." Commenters in the thread also make reference to a "sierrasixstudiosdev" GitHub account that hosted the malware and which has since been taken down.
Sierra Six has purged much of the Steam discussions section for Sniper: Phantom's Resolution, but it still has a developer statement up that, at first glance, appears almost comically audacious, an instance of real brass balls, "We're all trying to find the guy who did this" absurdity I can't help but admire.
"To avoid scams and potential issues, please ensure you download the game only from the official Steam page and disregard any other sources," the statement reads. "If you come across suspicious links or offers related to our game, please report them and stay cautious." The punchline, of course, is that the malware at the center of the controversy comes from a domain Sierra Six itself linked to, that is also its developer/publisher name on Steam.
I thought this was open and shut, but there's one final wrinkle to the story: Sierra Six says it was set up. I don't know if I buy the explanation, but it raises enough questions that I don't want to commit to grave dancing on Sierra Six as thwarted and humiliated scammers.
An account with the name AndrewPillDev responded to Feral_Wasp's post on March 19, one day before Sniper: Phantom's Resolution was retired for
good now. Andrew claims to speak on behalf of Sierra Six, and offers explanations for the malware being linked from the Steam page, the removal of Steam discussion posts about the malware, and the fact that this account was only created that very day.
(Image credit: User AndrewPillDev on Reddit)
Andrew claims that he found out about the malware via Polish news sites, and that English is not his first language. To hear him tell it, the team simply did not register the sierrasixstudios.dev domain in a timely fashion, putting it on the Steam page as a placeholder before they fleshed it out. He alleges that a malicious third party used this as a vector of attack. Here's some of his other defenses:
A typo on the store page? An honest mistake from a small team that doesn't speak English as a first language.
The generic appearance of the game and alleged use of screenshots from other games? Andrew shared footage he claims was from an in-progress level viewed with Unity dev tools.
Deleting discussion posts on Steam? A perhaps-misguided reaction to the waves of hostile comments.
His own account only having been made that day? "I want to add that I have never used Reddit before, so I'm not entirely sure if this message will reach everyone in the thread."
I truly do not know what to make of this. It would be such an elaborate scheme, framing a no-name developer on Steam in order to steal information from a few dozen players enticed enough to check out its official website instead of just wishlisting.
Best of the best
(Image credit: Larian Studios)
2025 games: Upcoming releases
Best PC games: All-time favorites
Free PC games: Freebie fest
Best FPS games: Finest gunplay
Best RPGs: Grand adventures
Best co-op games: Better together
For the footage, it's interesting, but also liable to have been somehow faked, manufactured, or otherwise sourced from somewhere else and taken out of context. Andrew does not address the GitHub page, which is still a troubling dimension of this story, and it honestly beggars belief that an indie game developer could claim, with a straight face, to have never used Reddit before.
But what if? Why would a hacker feel the need to keep up appearances through further social engineering like this post if the jig is already up? The stakes are already so low, the potatoes so small, and there are far easier ways to make money at other people's expense on the internet: I recommend pumping and dumping your own crypto shitcoin. For "Andrew" to be a hacker or even just an anarchic prankster stretches credulity almost as much as the story he tells.
If it is true, it's some real A Scanner Darkly stuff, a saga of digital impersonation and reputation-destroying total war that would be maddening to live through. People on the other side of the world have turned against you, proffering compelling evidence that you are a huckster and a criminal, and you have no recourse to prove your innocence, your protestations to the contrary—in a second language, no less—falling on deaf ears.
But, and I'm sorry if you are who you say you are, Andrew, Sniper: Phantom's Resolution simply does not look like a good game, real or fake. It's the stuff of generic milsim-adjacent tacticool shooting, aesthetically bland and promising an experience along the lines of "We have Sniper Elite at home." If Sniper: Phantom's Resolution was real, it was the perfect victim to be framed as a fake game.
"Be careful clicking on external links from Steam" appears to be one of few concrete takeaways here, with "be sure to secure your small business' web domain before you say it's yours" potentially being a second.
As with so many games industry stories, I'm reminded of the ending to the Coen Brothers film, Burn After Reading:
"What did we learn, Palmer?"
"I don't know, sir."
"I don't fucking know either. I guess we learned not to do it again."
Ted Litchfield
Social Links Navigation
Associate Editor
Ted has been thinking about PC games and bothering anyone who would listen with his thoughts on them ever since he booted up his sister's copy of Neverwinter Nights on the family computer. He is obsessed with all things CRPG and CRPG-adjacent, but has also covered esports, modding, and rare game collecting. When he's not playing or writing about games, you can find Ted lifting weights on his back porch.
You must confirm your public display name before commenting
Please logout and then login again, you will then be prompted to enter your display name.
A web3 free-to-play survival game found to be a front for installing malware on your PC has finally been removed from Steam
'A big scam company just stole my whole game': A Backrooms indie dev has been forced to seek legal help after someone took their game off Steam and uploaded it to the Nintendo Store
The biggest gaming controversies of 2024
DoubleWe blends Guess Who with Hitman, and its demo is one of the best I've played in ages
Balatro's first demo could be edited with Notepad to unlock the whole game—the solution? 'Bury it as soon as possible' with a 'newer, shinier version'
A UFO true believer made a grand strategy space game with input from alien abductees, but now claims shadowy forces have shut it down with a bomb threat
Latest in FPS
An FPS studio pulled its game from Steam after it got caught linking to malware disguised as a demo, but the dev insists it was actually the victim of a labyrinthine conspiracy
Somebody finally figured out casual Counter-Strike
Warhammer 40,000: Darktide’s getting a new roguelite wave defense mode that sounds a whole lot like a souped-up take on Killing Floor
'We made one big mistake': Destiny 2 developer reveals how a small team dedicated to player retention led to a 20 hour server outage and character rollback
I downloaded this bear-obsessed comedy FPS to kill time before Doom: The Dark Ages and discovered the most underrated shooter on Steam
Atomfall review
Latest in News
An FPS studio pulled its game from Steam after it got caught linking to malware disguised as a demo, but the dev insists it was actually the victim of a labyrinthine conspiracy
The specter of a GTA 6 delay haunts the games industry: 'Some companies are going to tank' if they guess wrong, says analyst
Warhammer 40,000: Darktide’s getting a new roguelite wave defense mode that sounds a whole lot like a souped-up take on Killing Floor
Nearly 2 years after its last update, the excellent Battle Brothers gets 'a bucket load of fixes' and free new content
'Players don't explore': former Grand Theft Auto 6 and Red Dead Online designer lays out the perils of 'open world fatigue'
Persona and Metaphor: ReFantazio's UI designer is open to accessibility options for players who find the stylish menus overstimulating: 'That is something we understand we'll need to work on and provide in the future'
More about fps
I downloaded this bear-obsessed comedy FPS to kill time before Doom: The Dark Ages and discovered the most underrated shooter on Steam
Somebody finally figured out casual Counter-Strike
I downloaded this bear-obsessed comedy FPS to kill time before Doom: The Dark Ages and discovered the most underrated shooter on Steam
See more latest
Most Popular
Former Age of Empires 2 dev claims Microsoft demanded its first expansion should have a Korean faction, because 'StarCraft sold 3 million copies in Korea'
Chaotic courier sim Deliver At All Costs will crash through your letterbox this May, and its latest trailer is even weirder than I expected
A bizarre mod that adds human poop to Skyrim led me on an enlightening journey into Viking sanitation: 'Your world will certainly be more immersive, but it will also certainly smell worse'
This upcoming Korean tactical shooter features 'situational awareness AI' that reminds me of the uber-smart clones from Monolith's FEAR
Today's Wordle answer for Saturday, March 22
The specter of a GTA 6 delay haunts the games industry: 'Some companies are going to tank' if they guess wrong, says analyst
Warhammer 40,000: Darktide’s getting a new roguelite wave defense mode that sounds a whole lot like a souped-up take on Killing Floor
'Players don't explore': former Grand Theft Auto 6 and Red Dead Online designer lays out the perils of 'open world fatigue'
Nearly 2 years after its last update, the excellent Battle Brothers gets 'a bucket load of fixes' and free new content
Persona and Metaphor: ReFantazio's UI designer is open to accessibility options for players who find the stylish menus overstimulating: 'That is something we understand we'll need to work on and provide in the future'
HARDWARE BUYING GUIDES
LATEST GAME REVIEWS
Best Steam Deck accessories in Australia for 2025: Our favorite docks, powerbanks and gamepads
Best graphics card for laptops in 2025: the mobile GPUs I'd want in my next gaming laptop
Best mini PCs in 2025: The compact computers I love the most
Best 14-inch gaming laptop in 2025: The top compact gaming laptops I've held in these hands
Best Mini-ITX motherboards in 2025: My pick from all the mini mobo marvels I've tested
Logitech G PowerPlay 2 mouse pad review
Colorful iGame RTX 5070 Ti Vulcan OC review
Atomfall review
Acer Predator Z57 gaming monitor review
Mackie CR3.5BT + CR8SBT subwoofer review
PC Gamer is part of Future plc, an international media group and leading digital publisher. Visit our corporate site.
Contact Future's experts
Terms and conditions
Privacy policy
Cookies policy
Advertise with us
Accessibility Statement
Future Publishing Limited Quay House, The Ambury,
BA1 1UA. All rights reserved. England and Wales company registration number 2008885.
Please login or signup to comment
Please wait...
Related News
12 Mar, 2025
World News | ICC Takes Custody of Former . . .
16 Mar, 2025
Six Nations coach furious as 'shocker' F . . .
18 Mar, 2025
Girls golf season preview, 2025
15 Mar, 2025
Sports News | WPL 2025: Two-time Runner- . . .
26 Mar, 2025
Telecommunication Engineering Centre
29 Mar, 2025
Sports News | Hockey Haryana Captain and . . .
22 Feb, 2025
Girls Basketball: Players of the Week in . . .
11 Feb, 2025
Pacific demographics, economies, educati . . .