A gamer seeking financial support for cancer treatment has fallen victim to a major cryptocurrency theft after downloading a verified Steam game called Block Blasters.
The 2D platformer, which had been available on the platform since July 30, was initially safe but turned malicious on August 30 when a cryptodrainer was added.
Published by Genesis Interactive, the retro-style game had accumulated hundreds of “Very Positive” reviews before being removed from Steam on September 21.
The attack came to light during a live fundraising event by streamer RastalandTV, who was raising money for treatment against stage 4 high-grade sarcoma. During the stream, he discovered his wallet had been drained of over $32,000.
Crypto investigator ZachXBT told BleepingComputer that the attackers stole around $150,000 from 261 accounts, while VXUnderground reports nearly 478 victims, many of whom were specifically targeted via Twitter for holding significant crypto assets. Security researchers found that the game’s malicious component harvested Steam login details, IP addresses, and digital wallet data through a dropper script, Python backdoor, and StealC payload.
Adding to the intrigue, investigators discovered exposed Telegram bot tokens linked to the attackers, and OSINT experts have hinted that the perpetrator may be an Argentinian immigrant living in Miami. Valve has yet to comment on the situation despite multiple reports.
If this article helped you, please consider supporting our work. Every small contribution keeps Abijita.com independent and running.
The Block Blasters case adds to a growing trend of malware-infested Steam games, following similar incidents with Chemia, Sniper: Phantom’s Resolution, and PirateFi. Security experts warn gamers to be cautious with free-to-play or little-known titles on Steam, especially those in beta, and advise anyone who installed Block Blasters to reset their Steam credentials and move crypto assets to secure wallets immediately.
