The Federal Bureau of Investigation is actively investigating a series of Steam games that were secretly laced with malware, potentially compromising thousands of users between May 2024 and January 2026. The agency has launched a public form to identify victims and gather details about the scope of the operation.
Malware Distribution on Steam
Threat actors exploited the Steam platform to distribute infected games, including titles such as BlockBlasters, Chemia, Dashverse/DashFPS, Lampy, Lunara, PirateFi, and Tokenova. The malware was embedded within the games themselves, meaning users unknowingly downloaded malicious software alongside legitimate content. Some infections occurred via initial downloads, while others were injected through seemingly normal game updates.
How the Malware Worked
Once installed, the malware allowed attackers to steal user data, including banking information, cryptocurrency wallet access, and Steam inventory items. One confirmed case involved the theft of $150,000 in cryptocurrency from a single victim via the BlockBlasters game alone. The FBI’s investigation suggests the attackers also engaged in direct contact with victims, either before or after infection, potentially to further exploit compromised systems.
What the FBI is Asking for
The FBI form requests Steam usernames, downloaded game titles, and the approximate dates of downloads. Victims are also asked to report any financial losses or unauthorized activity in their digital accounts. This data will help the agency track the extent of the operation and identify those responsible.
Why This Matters
The incident highlights a critical vulnerability in digital distribution platforms like Steam. While Steam has since removed the infected games, the case raises questions about security protocols and the potential for malicious actors to exploit open platforms. The fact that even moderately popular games like BlockBlasters could facilitate significant financial theft underscores the risk to all users, not just those downloading obscure titles.
The FBI’s investigation is ongoing, and anyone who downloaded these games is urged to report their experience. The incident serves as a stark reminder of the importance of vigilance when downloading software from any source.
