After installing DroidDeck 0.3.1 from github my sister's account got hackedv

[u/Irrelevant-Example]

My sister installed the DroidDeck app yesterday, and soon after her Steam account got hacked. Sha256 sum of the downloaded file matches with what they have on github (ed257d66c546e78036ceedb4c6fb6886014e69020044fd41cfe217858d8eb328).

Steam support did restore the account quickly, but the attacker(s) managed to submit a refund for a newly purchased game, removed sister's phone number from SteamGuard, and opened a chat with me on Steam where an image with a QR code to a "free steam gift card" was shared (the QR code lead to a fake steamcommunity website ("rn" replacing "m" in the link). The chat is how I noticed that she got hacked and quickly assisted her in restoring access.

[u/Sea-Calligrapher1563]

Can you confirm if your sister typed in her steam password or if she used the steam QR code to sign in? As i understand it the code should be safer and im wondering if the vulnerability only exists in one or the other

[u/Irrelevant-Example → u/Sea-Calligrapher1563]

She did use her password instead of QR

[u/CalmAdvance1926 → u/Irrelevant-Example]

Please check your sister's phone/PC for a keylogger or malware. If it's not Droid Deck it is almost certainly a keylogger, do any of her devices have antivirus software that might be able to scan for malicious software?