FBI Seeks Victims of Malware-Infected Steam Games
Summary
The FBI’s Seattle Division is seeking information from people who installed malware-bearing Steam games between May 2024 and January 2026, including details about cryptocurrency transactions, compromised accounts, and promotional communications.
Key points
- The FBI is seeking people who may have been affected by eight malicious Steam games during May 2024–January 2026.
- Named games include BlockBlasters, Chemia, Dashverse/DashFPS, Lampy, Lunara, PirateFi, and Tokenova.
- The FBI questionnaire asks about cryptocurrency transactions, compromised accounts, stolen funds, and communications with game promoters.
- Reported malware includes cryptodrainer modifications, Vidar, HijackLoader, and EncryptHub’s Fickle Stealer.
- A streamer reported losing more than $32,000 after downloading BlockBlasters; a blockchain investigator estimated roughly $150,000 stolen from 261 Steam accounts, while VX-Underground reported 478 victims.
- Steam warned PirateFi players that malicious files may have run and advised antivirus scans, reviewing installed software, and considering an OS reinstall.
Article Details
- Event Type
- The FBI’s Seattle Division is seeking information from potential victims as part of an ongoing investigation into malware distributed through Steam games between May 2024 and January 2026.
- Impact
- The games were associated with cryptocurrency theft, account hijacking, and malware that could steal credentials, browser data, cookies, and cryptocurrency wallets. For BlockBlasters, streamer Raivo Plavnieks reported losing more than $32,000; ZachXBT estimated roughly $150,000 stolen from 261 accounts, while VX-Underground reported a higher victim count of 478. The FBI is collecting information to identify victims and trace transactions; these figures are reported estimates, not confirmed totals.
People
Raivo PlavnieksThe streamer, also known as RastalandTV, revealed during a livestream that BlockBlasters was malicious; after downloading the game, he reported losing more than $32,000 from his cryptocurrency wallet.ZachXBTBlockchain investigator who estimated that attackers stole roughly $150,000 from 261 Steam accounts in the BlockBlasters case.
Threat Actors
Malware
Fickle StealerObserved malware includes cryptodrainer modifications, the Vidar infostealer, HijackLoader, and EncryptHub’s custom Fickle Stealer.HijackLoaderObserved malware includes cryptodrainer modifications, the Vidar infostealer, HijackLoader, and EncryptHub’s custom Fickle Stealer.Vidar#BlockBlasters #Vidar
Products
BlockBlasters#BlockBlasters #VidarChemiaThe agency identified eight games including BlockBlasters, Chemia, Dashverse/DashFPS, Lampy, Lunara, PirateFi, and Tokenova.DashFPSThe agency identified eight games including BlockBlasters, Chemia, Dashverse/DashFPS, Lampy, Lunara, PirateFi, and Tokenova.DashverseThe agency identified eight games including BlockBlasters, Chemia, Dashverse/DashFPS, Lampy, Lunara, PirateFi, and Tokenova.LampyThe agency identified eight games including BlockBlasters, Chemia, Dashverse/DashFPS, Lampy, Lunara, PirateFi, and Tokenova.LunaraThe agency identified eight games including BlockBlasters, Chemia, Dashverse/DashFPS, Lampy, Lunara, PirateFi, and Tokenova.PirateFiThe agency identified eight games including BlockBlasters, Chemia, Dashverse/DashFPS, Lampy, Lunara, PirateFi, and Tokenova.SteamThe FBI’s Seattle Division is asking gamers who installed one of eight Steam titles containing malware between May 2024 and January 2026 to provide information as part of an ongoing investigation.TokenovaThe agency identified eight games including BlockBlasters, Chemia, Dashverse/DashFPS, Lampy, Lunara, PirateFi, and Tokenova.