Steam’s reputation as a safe gaming platform has taken another hit. In recent months, several titles containing malware have surfaced on Valve’s store, putting user data and devices at risk. Despite ongoing efforts to combat these threats, a new case has emerged that’s more alarming than any before it.
Valve has removed BlockBlasters, a 2D platformer that was found to contain malicious code designed to steal cryptocurrency wallets from unsuspecting players.
BlockBlasters Drains Players’ Crypto Wallets
BlockBlasters, developed by Genesis Interactive, launched on Steam as a free-to-play game on July 30. The title quickly gained attention for its retro style and positive reviews—but things took a dark turn after a recent update.
According to reports, the developers quietly added a crypto drainer to the game on August 30, a malicious tool that captures login credentials and digital wallet data from affected users.
The scam came to light when streamer Raivo Plavnieks, who was raising funds for cancer treatment, lost $32,000 USD in cryptocurrency after playing BlockBlasters live on stream. Investigators now estimate the malware stole at least $150,000 USD in total from around 260 Steam users.
A Coordinated Scam Hidden in Plain Sight
Cybersecurity experts say the operation appears to have been planned from the start. Attackers reportedly identified potential victims—particularly those active in crypto communities—through social media.
Some streamers were allegedly invited to showcase BlockBlasters live, unaware it was a trap. Once launched, the game executed a script that collected Steam login details and IP addresses, cross-referencing them with crypto wallet information stored on the victims’ systems.
Valve Responds and Removes the Game
Following the reports, Valve has delisted BlockBlasters, making it unavailable for download. The company has not yet issued an official statement addressing the incident or explaining how it plans to prevent similar cases in the future.
Unfortunately, this isn’t the first time malware has slipped through Steam’s defenses. In recent months, other infected titles, such as PirateFi, Sniper: Phantom’s Resolution, and Chemia, were also removed after being found to contain code designed to steal user data or damage systems.
What to Do If You Installed BlockBlasters
Players who downloaded or played BlockBlasters are strongly advised to act immediately. According to past Steam support recommendations, users should run a full antivirus scan to detect any lingering threats.
Valve has also suggested in similar cases that players reformat their PCs to ensure all malicious files are removed and system security is fully restored.
