Second Steam listing this year found hiding ‘new and clever’ malware. This time through a fake demo link on developer’s website