you'd be surprised at how easy it is to include malware in images especially gif and webp's, and as for the CSAM stuff I haven't seen any myself but there was a lot of furry porn or hentai, gay porn... etc just pure degeneracy, so I already had it disabled on my machine a while before it even got removed
I didn't say it wasn't easy to put that stuff in there. I did say there were false rumors that malware could be included in sprays. Skial has already acknowledged this was fake, but the rumor was too widespread, so they decided to disable sprays anyways.
how do you know? did you throw a sample in a VM and collected event logs and network traffic to confirm that? did you reverse it in something like ghidra? AV's aren't a reliable source.
thanks for the info but still, there's a trick that malware distributors use in which they take advantage of known flaws in decoders to do something like a bufferoverflow/stackoverflow and execute their scripts unless this person has somehow figured how to do that with vtf file then I don't think it would work so crisis averted I guess plus I think valve pays bounty hunters so he would be losing on a bit of cash if he didn't report it properlyNo someone made a youtube video of doing that himself and recording the reactions of the server
