Hello @gunmakerguardian, in general, security issues should always be reported via a non-public medium. Additionally, issues with the Steam for Windows client are out of scope for this issue tracker.
Please report this issue to Steam Support for the larger Steam support team to ponder.
Nothing extracted yet.
tool name identified blyattchat function rogue ai harrasment
Description: I am reporting a persistent security breach involving a rogue third-party software (identified as a "dubious vendor" tool) that has successfully hijacked my Steam Client's core functions for the purpose of targeted harassment.
the entry vector is to target the steam overlay and force it into a headless mode ignoring the state of the toggling buttons to disable steamoverlayui.exe .
Technical Details for Engineering: Overlay Injection: The software is manipulating GameOverlayUI.exe to run in a "headless" state. It bypasses the Steam Client's internal "Disable Overlay" toggles by modifying localconfig.vdf in ram this is known asa headless or ram attack identified by 360totalsecurity cn antivirus tool in "kung-peng" mode Console Exploitation:
agentics are sending commands to the game’s debug console (targeting games like LoL, VRChat, and RuneScape) to spam chat and block users, when hotkeys to access the debug console are enabled.
Persistent ID Tracking: The software has harvested my Hardware ID (HDID) and Disk Serials to maintain persistence across reboots and account changes. this has been identified multiple times and i even managed to have one agentic spit out my hardrives serial id(an m.2 flash nand array) into public chat using a confusion technique i invented. Network Interference: I have detected malicious packet injection (confirmed by network spikes) that targets Steam's connection, which I have temporarily mitigated via a very specific vpn tool.