For nearly two months, a seemingly legitimate game on Steam was secretly stealing money. One victim was a gamer raising funds for cancer treatment.
The game in question, Block Blasters, is a free retro-style 2D platformer from Genesis Interactive with hundreds of positive reviews. Despite passing Steam verification, its code contained a trojan that quietly accessed users’ crypto wallets and drained funds. The game was available on the platform from August 30 to September 21 before its page was removed.
The first major incident involved Latvian streamer RastalandTV, who lost over $32,000 during a charity stream after downloading Block Blasters. He explained that he trusted Steam and didn’t suspect any issues. Fortunately, crypto influencer Alex Becker transferred $32,500 to his safe wallet.
Crypto researcher ZachXBT reported that a total of 261 Steam accounts lost about $150,000. Another security group, VXUnderground, identified 478 affected users and published a list of usernames, urging them to change their passwords immediately.
Investigations revealed the attackers specifically targeted crypto holders, sending invites to “try the game,” which triggered malicious code. The scheme involved dropper scripts, a Python backdoor, and the StealC loader, collecting Steam login data, IP addresses, and other sensitive information to send to a command server.
Researchers also found mistakes in the malware: Telegram bot tokens and activity traces were left in the code. There’s even speculation that one attacker may be an Argentine immigrant in Miami, though this hasn’t been confirmed.
Experts advise that anyone who installed Block Blasters should immediately change their Steam passwords and move crypto assets to new wallets.
More Stories
Wizards of the Coast unveils a first look at Exodus combat and exploration gameplay
A Cyberpunk 2077-based card game raised nearly $8 million on Kickstarter within just a few hours
Resident Evil Requiem sets record-breaking sales pace for Capcom