With the new bug, hackers can take control of users’ systems by simply sending them CS: GO invitation links to play the online multiplayer shooter.
The bug was first discovered by a hacking group – The Secret Club. According to a video they posted on their official Twitter handle, the bug affects Steam Invite system This is where players click the Invite to Play option in CS: GO and hackers can get private details and information of those who accept the invitation.
It is important to note that the main problem is with the source game engine developed by Valve. The engine is used by many Valve titles, including the popular multiplayer title – Counter Strike: Global Offensive. While the problem doesn’t exist in other titles, CS: GO still has it. It can be clearly seen in the video below.
The Secret Club also told Motherboard that one of their members and security researcher named Florian Valve reported the bug back in 2019 HackerOne, a bug bounty platform.
Florian confirmed that Valve had marked the bug as “critical” and also admitted that they were slow to react.
While it’s clear that Valve fixed the bug for most of the games, the bug is a big problem for gamers. At the moment, Valve has not responded to the hacker’s report. Also, the gaming platform has not confirmed when a fix for the same will arrive in the game.