The game BlockBlasters, which was officially verified by the Steam service and had been available to users for over a month, became the source of a massive cryptocurrency theft. At the end of August 2025, malicious code was introduced into the game, leading to player losses exceeding $150,000.
This is reported by Business • Media
Malicious Code in Steam Game: Hundreds of Users Affected
One of the most affected was Latvian streamer Raivo Plavnieks, known by the nickname RastalandTV. During a charity stream aimed at raising funds for cancer treatment, he downloaded BlockBlasters and immediately lost over $32,000 in cryptocurrencies from his wallet.
According to reports from BleepingComputer, at least 261 accounts were affected by this attack. Some sources, including VXUnderground, indicate there may be 478 potential victims. Total losses exceed $150,000, indicating the scale of the incident.
Investigation and Consequences for the Gaming Platform
A group of researchers conducted a thorough analysis of the malware. It was found that the virus collected information about the user’s system, detected the presence of antivirus programs, copied data from Steam, and transmitted it to remote servers.
“The authors of the investigation emphasize that this incident was made possible due to the lack of proper oversight by Valve (the developer of Steam), which allowed an overtly dangerous game to appear on its platform.”
Researchers also provided evidence of the existence of malicious files, a list of potential victims, and even snippets of code used by the attackers. There is currently an ongoing search for those responsible for the attack: preliminary data suggests it may involve an Argentine immigrant living in Miami, USA, but there is no official confirmation of this information yet.
It is worth noting that this is not the first such incident: in July 2025, experts had already discovered malware integrated into a game on the Steam platform.