August 1, 2026, 10:44 am | Read time: 3 minutes
For many gamers, Steam is the go-to platform for new games. So, the surprise must have been significant for numerous users when investigators uncovered a large-scale malware campaign. According to current findings, several games on the platform not only provided entertainment. Instead, the titles were used to deliver malware to buyers’ computers. Since the games were available through regular channels on Steam, many affected users initially noticed nothing amiss.
Campaign Ran Over a Long Period
According to the online magazine “Techspot,” the operation began in May 2024. Over nearly two years, the perpetrators are said to have released at least eight manipulated games. To reach as many people as possible, the titles were also promoted on Discord, Telegram, X, and LinkedIn.
Investigations revealed that automated accounts were also used. These accounts specifically targeted individuals with larger cryptocurrency holdings and contacted them directly. In total, around 8,000 computers were infected in this manner. By early 2026, the affected games had disappeared from Steam.
FBI Seeks More Potential Victims
To better assess the extent of the incidents, the FBI office in Seattle asked potential victims for assistance. Users who had installed one of the affected games or had relevant information could report via an online form. Investigators were particularly interested in the following details:
- Installed game
- Time of installation
- Suspicious contacts
- Possible financial damages
Additionally, information on accounts, crypto wallets, chat logs, and transaction data was sought to help identify more victims.
Scammers on WhatsApp Promise Winnings–and Steal Your Money
FBI Sounds the Alarm: Thousands of Messenger Accounts Already Compromised
Malware Targeted Crypto Wallets
During the investigations, it was also revealed how the attacks were supposed to work. According to investigators, the malware was designed to read passwords and other sensitive data from the affected computers. With the stolen credentials, the perpetrators could then access digital wallets. The attacks targeted not only personal information but also the victims’ cryptocurrencies.
The investigations suggest that the perpetrators plundered about 80 crypto wallets in total. According to current findings, at least $220,000, approximately 193,000 euros, was stolen. The game “BlockBlasters” was reportedly particularly affected, with $150,000, around 132,000 euros, being stolen through it alone.
Also of interest: These erotic anime wallpapers are now spreading malware
Bitcoin Payments Led to Suspect
Investigators identified the main suspect through payments from a Bitcoin wallet linked to the campaign. The trail led to an account with a gift card service. More than 150 digital credit codes were purchased through it.
Many of these codes were subsequently redeemed on Uber Eats. According to investigators, orders could be traced to the suspect’s residential and college addresses. In mid-July 2026, the FBI arrested a 21-year-old man from Florida.
According to the indictment (PDF file), he allegedly financed the release and marketing of the manipulated games and was involved in the profits. He is now facing charges of conspiracy to unlawfully obtain computer data. If convicted, he faces up to five years in prison and a fine.