A gamer lost $32,000 after downloading the BlockBlasters game from Steam, which drained his cryptocurrency wallet. The game was safe until August 30 when a malicious cryptodrainer component was added. Published by Genesis Interactive, the game is no longer available on Steam. The malicious component was discovered during a live fundraising stream by RastalandTV, who started a GoFundMe campaign for cancer treatment donations.
Crypto influencer Alex Becker sent $32,500 to RastalandTV to cover the loss, as attackers stole $150,000 from 261 Steam accounts. VXUnderground reported 478 victims and advised them to reset their passwords. Researchers detailed the dropper batch script used in the attack, along with a Python backdoor and StealC payload documented by GDATA researchers.
OSINT experts identified the threat actor as an Argentinian immigrant living in Miami, Florida. Similar instances of malware-infected games on Steam were reported earlier this year.
Users who installed BlockBlasters are advised to reset Steam passwords and move digital assets to new wallets to secure their information.
