Vice FBI Investigates Malware Embedded in Steam Games Affecting Millions of Players
Article Content
- •FBI is investigating malware embedded in multiple Steam games over a two-year period.
- •Affected games include BlockBlasters, Chemia, DashFPS, and others, with malware active from May 2024 to January 2026.
- •The investigation may lead to changes in Valve's game vetting process.
The FBI is investigating a malware campaign targeting Steam users, with evidence suggesting that a single hacker has embedded malicious software in multiple games over a two-year period. The affected games include BlockBlasters, Chemia, Dashverse/DashFPS, Lampy, Lunara, PirateFi, and Tokenova. The malware, which has been active from May 2024 to January 2026, has reportedly stolen sensitive information, including account details and cryptocurrency. Valve had previously removed some of these games after discovering the malware, but many users may still be at risk. The FBI is actively seeking to identify victims and has urged players to check their libraries for potentially compromised titles. The investigation highlights significant vulnerabilities in digital distribution platforms and may lead to changes in how games are vetted before publication. The scope of the attack could potentially impact hundreds of thousands of gamers worldwide.
Ask AI about this cluster
Answers cite the sources they use
Timeline
More articles in this cluster (40)
Following this threat?
Track BlockBlasters and Valve in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.
Free account · no card needed
Continue Reading
Rising Cyber Scams Targeting the Gaming Community The gaming industry, with over 3.6 billion players globally, is facing a surge in cyber scams, including phishing and malware attacks. In the past year, Kaspersky reported over 19 million gaming-related cyberscams, leading to estimated losses of $216 million. Scammers are increasingly using tactics such as malware…
Critical BeyondTrust 9.3 Vulnerability Actively Exploited by Threat Actor A critical vulnerability (CVE-2026-102764) in BeyondTrust Remote Support has been discovered and is actively being exploited by the threat group ARMORY CASTLE, reportedly linked to China. The vulnerability, which has a CVSS score of 9.3, allows unauthenticated attackers to upload files and potentially compromise host…