Steam Removes Malware-Infected Game That Stole $150000 in Cryptocurrency

Steam Removes Malware-Infected Game That Stole $150000 in Cryptocurrency.

Free game ‘Block Blasters’ contained crypto-draining malware affecting 261 users.

Steam has removed a free game called “Block Blasters” after it was discovered to contain malware designed to steal cryptocurrency from players’ digital wallets. The malicious software reportedly caused damages totaling $150,000 across 261 affected accounts.

Steam Removes Malware-Infected Game That Stole $150000 in Cryptocurrency

The Attack Timeline

The game, developed by Genesis Interactive, was initially released on Steam on July 30 as a legitimate free-to-play title. However, on August 30, the developers secretly updated the game to include what cybersecurity experts call a “crypto drainer” – malware specifically designed to steal cryptocurrency.

Once players installed the infected version, the malware would scan their systems for cryptocurrency wallet information, extract private keys and personal data, and then automatically transfer funds to accounts controlled by the attackers.

Significant Financial Impact

According to cryptocurrency investigator ZachXBT, the attack affected 261 user accounts with total losses reaching $150,000. The investigation revealed that victims’ cryptocurrency wallets were completely drained by the malicious code.

Among the victims was video game streamer RastalandTV, who was conducting a live charity fundraising stream for cancer patient treatment when the attack occurred. The streamer posted an emotional video on X (formerly Twitter) describing the devastating impact of losing the charitable donations.

Criticism of Steam’s Response

The incident has drawn criticism toward Steam’s content review process and response time. Critics point out that “Block Blasters” was a “verified” title that had passed Steam’s approval process, raising questions about the platform’s security screening procedures.

The game remained available on Steam until September 21 – nearly three weeks after the malware was first deployed – leading to complaints about the platform’s slow response to the security threat.

Ongoing Security Concerns

While malware incidents on Steam have occurred before, cybersecurity experts note that this case stands out due to the scale of financial damage caused. The incident highlights ongoing vulnerabilities in digital game distribution platforms and the sophisticated methods cybercriminals are using to target cryptocurrency holders.

Steam has not yet issued a public statement regarding the incident or announced any changes to its content review processes in response to this security breach.