Popular Slay the Spire mod hacked to deliver malware on Christmas Day

GamesCard GameSlay the SpirePopular Slay the Spire mod hacked to deliver malware on Christmas DayWhen you purchase through links on our site, we may earn an affiliate commission.Here’s how it works.

When you purchase through links on our site, we may earn an affiliate commission.Here’s how it works.

(Image credit: Mega Crit Games)

Slay the Spire Silent Class

A popular Slay the Spire mod called Downfall was compromised over the holidays, and used to push malware to users via a Steam update. The malware in question is called Epsilon and is used to steal information from infected hardware, and was present in the standalone version of the mod on Steam for around an hour on Christmas Day.

“Christmas Day, at roughly 12:30 PM Eastern time, we experienced a security breach,“writes developer Michael Mayhem. “At roughly 1:20 PM, that breach allowed a malicious upload to overtake our game on Steam’s library for a period of roughly one hour. Our Steam and Discord accounts were hijacked, and though the Steam accounts were able to be recovered late in the evening, we were limited in our ability to warn or communicate immediately following the breach. Fortunately, we were able to contain the actual breach much more quickly than the amount of time it took to recover the accounts.”

“In your users/[username]/AppData/Local/Temp folder, there will be several files the Trojan creates,” one affected user writes. “One will be called epsilon-[username].zip, which contains everything the Trojan has stolen: Discord info, autocomplete, saved passwords, network info, cookies, saved credit cards, steam info. WARNING: If you go investigating these files for yourself, to do so without being connected to the internet, just in case there is still some possibility of retriggering an event.”

Mayhem says a security professional who’s looked at the breach believes it was a so-called “token hijack” orsession hijack, and the damage has been minimal,though added to BleepingComputerthat he’s “reluctant to state anything with absolute certainty”.

The mod’s developers have purged all affected hardware on their end, are communicating with users and Valve about the breach, and are putting additional security in place to hopefully prevent something like this happening again.

The biggest gaming news, reviews and hardware deals

“I can’t apologize enough to the affected users,” says Mayhem. “The thought that someone would hijack a free passion project for malicious intent is truly vile. If you are an affected user, please contact me and I will do everything I can to help. Downfall is nothing without its players and the joy surrounding it and I am appalled at the attack.”

This follows shortly after Valve announcednew security checkson Steam developers pushing any update on their game’s default release branch, after various examples of malicious builds being pushed to players via Steam. At the time Valve told PC Gamer that this “extra friction” for partners is a “necessary tradeoff for keeping Steam users safe and developers aware of any potential compromise to their account”, adding that it has seen “an uptick in sophisticated attacks” targeting dev accounts.

Any users of Downfall are advised to change their passwords, and make sure two-factor authentication is enabled wherever possible.

More about card gamesLegendary joker ports Balatro to the 44-millimeter screen of an Apple Watch, calls it ‘Wee Balatro’You should definitely grab today’s free Epic Store giveaway: this ‘dicebuilder’ might quietly be the best freebie of the seasonLatestThe Last of Us season 2 trailer is a brief look at a story you should probably just play yourself in AprilSee more latest►

More about card games

Legendary joker ports Balatro to the 44-millimeter screen of an Apple Watch, calls it ‘Wee Balatro’You should definitely grab today’s free Epic Store giveaway: this ‘dicebuilder’ might quietly be the best freebie of the season

Balatro being played on an Apple Watch

Legendary joker ports Balatro to the 44-millimeter screen of an Apple Watch, calls it ‘Wee Balatro’

Astrea: Six-Sided Oracles art

You should definitely grab today’s free Epic Store giveaway: this ‘dicebuilder’ might quietly be the best freebie of the season

LatestThe Last of Us season 2 trailer is a brief look at a story you should probably just play yourself in AprilSee more latest►

Latest

The Last of Us season 2 trailer is a brief look at a story you should probably just play yourself in April

the last of us season 2 trailer

The Last of Us season 2 trailer is a brief look at a story you should probably just play yourself in April

See more latest►

Most PopularMarvel Rivals’ latest update quietly killed the game’s burgeoning mod sceneSorry everyone, Minecraft 2 is cancelled, and it might be our faultTeam Fortress 2 just had the single biggest trade in its history, with ‘the absolute best hat you can get’ going for around $40KIs the new RTX 5070 really as fast as Nvidia’s previous flagship RTX 4090 GPU? Turns out the answer is yes. Kinda.Elden Ring: Nightreign is getting a closed network test, and I’m totally not fuming because PC players aren’t invited to the party, or anythingIf you’re a content creator and gamer looking for a CPU upgrade, this Ryzen 9 9900X deal will get you $90 offAMD is now reportedly making all-American Ryzen 9000 CPU dies at TSMC’s Arizona fabI tried a sim racing rig that generates ‘wind’ at CES 2025 and it’s claimed to help keep VR nausea at bayFinal Fantasy 14 communities panic as it turns out change to blacklisting, meant to help reduce stalking, also lets players use mods to track their altsTikTok’s time in the US may be ticking to a close as it makes a last stand in the Supreme Court, though Trump now says he ‘opposes banning’ itMSI intros cheaper ‘back connect’ Project Zero Intel motherboards for super-clean PC builds you might actually be able to afford

Most Popular

Marvel Rivals’ latest update quietly killed the game’s burgeoning mod scene

Sorry everyone, Minecraft 2 is cancelled, and it might be our fault

Team Fortress 2 just had the single biggest trade in its history, with ‘the absolute best hat you can get’ going for around $40K

Is the new RTX 5070 really as fast as Nvidia’s previous flagship RTX 4090 GPU? Turns out the answer is yes. Kinda.

Elden Ring: Nightreign is getting a closed network test, and I’m totally not fuming because PC players aren’t invited to the party, or anything

If you’re a content creator and gamer looking for a CPU upgrade, this Ryzen 9 9900X deal will get you $90 off

AMD is now reportedly making all-American Ryzen 9000 CPU dies at TSMC’s Arizona fab

I tried a sim racing rig that generates ‘wind’ at CES 2025 and it’s claimed to help keep VR nausea at bay

Final Fantasy 14 communities panic as it turns out change to blacklisting, meant to help reduce stalking, also lets players use mods to track their alts

TikTok’s time in the US may be ticking to a close as it makes a last stand in the Supreme Court, though Trump now says he ‘opposes banning’ it

MSI intros cheaper ‘back connect’ Project Zero Intel motherboards for super-clean PC builds you might actually be able to afford

HARDWARE BUYING GUIDESLATEST GAME REVIEWS1Best Steam Deck accessories in Australia for 2025: Our favorite docks, powerbanks and gamepads2Best graphics card for laptops: the mobile GPUs I’d want in my next gaming laptop3Best mini PCs in 2025: The compact computers I love the most4Best 14-inch gaming laptop: The top compact gaming laptops I’ve held in these hands5Best Mini-ITX motherboards in 2025: My pick from all the mini mobo marvels I’ve tested1Thank Goodness You’re Here! review: An anarchic treasure trove of jokes and skits2Shiren the Wanderer: The Mystery Dungeon of Serpentcoil Island review—like juggling chainsaws on horseback3WD Black SN850X 8 TB NVMe SSD review4Ikea Utespelare desk review5Asus ROG Harpe Ace Mini wireless mouse review

HARDWARE BUYING GUIDESLATEST GAME REVIEWS

1Best Steam Deck accessories in Australia for 2025: Our favorite docks, powerbanks and gamepads

A bunch of the best Steam Deck accessories on a blue background.

1Best Steam Deck accessories in Australia for 2025: Our favorite docks, powerbanks and gamepads

Best Steam Deck accessories in Australia for 2025: Our favorite docks, powerbanks and gamepads

2Best graphics card for laptops: the mobile GPUs I’d want in my next gaming laptop

Best graphics card for laptops: the mobile GPUs I’d want in my next gaming laptop

3Best mini PCs in 2025: The compact computers I love the most

Best mini PCs in 2025: The compact computers I love the most

4Best 14-inch gaming laptop: The top compact gaming laptops I’ve held in these hands

Best 14-inch gaming laptop: The top compact gaming laptops I’ve held in these hands

5Best Mini-ITX motherboards in 2025: My pick from all the mini mobo marvels I’ve tested

Best Mini-ITX motherboards in 2025: My pick from all the mini mobo marvels I’ve tested

1Thank Goodness You’re Here! review: An anarchic treasure trove of jokes and skits

Thank Goodness You’re Here review

1Thank Goodness You’re Here! review: An anarchic treasure trove of jokes and skits

Thank Goodness You’re Here! review: An anarchic treasure trove of jokes and skits

2Shiren the Wanderer: The Mystery Dungeon of Serpentcoil Island review—like juggling chainsaws on horseback

Shiren the Wanderer: The Mystery Dungeon of Serpentcoil Island review—like juggling chainsaws on horseback

3WD Black SN850X 8 TB NVMe SSD review

WD Black SN850X 8 TB NVMe SSD review

4Ikea Utespelare desk review

Ikea Utespelare desk review

5Asus ROG Harpe Ace Mini wireless mouse review

Asus ROG Harpe Ace Mini wireless mouse review

The biggest gaming news, reviews and hardware deals#

The biggest gaming news, reviews and hardware deals