[MrZander]

There hasn't been any confirmation about how exactly it happened. It seems to me that the most likely scenario was these players got phished prior to the tournament and were already infected with malware.

[ParetoOptimal]

I agree, however source engine does have a history of some RCEs. The first one that was phished could have been used to phish the other as well.