Valve adds new security check after attackers compromise Steam accounts of multiple game devs and update their games with malware
Valve adds new security check after attackers compromise Steam accounts of multiple game devs and update their games with malware

www.pcgamer.com
Valve adds new security check after attackers compromise Steam accounts of multiple game devs and update their games with malware

I don't want to be too cynical, but I get the feeling this is working as intended on the parts of the "developers." If less than 100 people had the game installed, there is a good chance it was shovel-ware with a low or free upfront cost that was then sold to scammers. The scammers push the malware, get all the information they want from compromised machines, and then move on. The SMS will really only be a sort of "you gave the OK for this update to be pushed out, so you are responsible," type thing, which won't matter in the case of malicious shovel-ware and fly by night devs who only plan to sell out their install base, anyway.
It's not a confirmation via SMS, it's a verification via SMS, so the attacker has to have your phone number as well as your steam account to attack it, which makes it harder.
That's why I was saying that this is "working as intended" and that more than likely this was perpetrated by less-than-savory devs who purposefully sold out the people who bought their games. There were no "hackers" only shitty devs that claimed they were hacked after they got caught distributing malware. Again, I may just be overly cynical.
They're saying the people who bought the game from the original devs may have been the ones to upload the malware. In that case, they could confirm the SMS very easily.
And SMS messages can be intercepted. Not a good option, use physical security keys instead!
This totally makes sense. There's so much shovelware.
Every day, there's like 10 new hentai games. It makes it impossible to have the "adult" option turned on and look at new releases.