A verified game on Steam, titled Block Blasters, managed to slip under Valve's radar and become a trap for hundreds of unsuspecting users. What seemed like an innocent 2D platformer with a retro aesthetic, hid a crypto-drainer, i.e. malware designed to steal digital wallets, in its code.
The incident gained even more publicity, as one of the victims was the well-known streamer RastalandTV, who lost $32,000 intended for cancer treatment. The event caused a storm of reactions in the community, highlighting once again the vulnerabilities in the security of digital game distribution platforms.
The problem of trust in large platforms
Valve and Steam have built a reputation as the “safe haven” for gamers. A game’s presence on the platform is almost taken for granted as a guarantee of reliability. However, Block Blasters proved that the reality is more complicated.
See also: New Botnet Exploits DNS Misconfiguration
Despite being “ verified ” and receiving positive reviews , the game operated as a tool money-stealing for weeks . This shows that the verification process on Steam is not rigorous enough . Instead of substantive code review, it seems that a more procedural logic prevails, leaving loopholes that cybercriminals are quick to exploit.
Cryptocurrency researcher ZachXBT told BleepingComputer that the attackers appear to have stolen a total of $150,000 from 261 Steam accounts.
Security group VXUnderground, which is also tracking the attack, reports a higher number of victims, 478, and published a list of usernames, urging their owners to immediately reset their passwords.
It is said that these individuals were targeted after being identified via Twitter and possibly sent invitations to try out the game.
Gaming and cryptocurrencies: A dangerous combination
This particular attack was not random. Hackers know that many gamers, streamers, and content creators hold digital wallets with significant amounts of money. The growth of the NFT market, the proliferation of in-game trading, and the connection of gaming with Web3 have created a new category of targets that combine entertainment and economic activity.
The fact that the attackers allegedly targeted specific individuals with high crypto activity via Twitter shows that the attacks are now targeted and not indiscriminate, which makes the threat even more serious.
See also: Fake pages mimic FBI's IC3 site
Ethical and social dimensions of the incident
RastalandTV's drama touched the community because it brought the human element to the fore. It wasn't just about an anonymous gamer who lost digital tokens, but about a man fighting for his life. The loss of money has direct consequences for his health.
The community reaction has been heartwarming, however. Some influencers and members of the crypto community have covered the financial damage, showing their solidarity. But that doesn't negate the fact that the incident reveals how fragile online security can be, even when large companies like Valve are involved.
Valve's response and the issue of liability
So far, Valve has not provided a clear answer as to how Block Blasters became infected. The game was available on Steam for almost two months, between July 30 and September 21. It was safe until August 30, when a cryptodrainer component. The company's silence is causing discomfort for many users, as it creates a feeling of a lack of transparency.
🔒 Protect your privacy with Proton VPN
Swiss VPN from the creators of Proton Mail — strict no-logs policy, strong encryption, and built-in NetShield that blocks ads, trackers, & malware.
- ✔ No-logs, based in Switzerland (except 14-Eyes)
- ✔ NetShield: blocks ads, trackers & malicious domains
- ✔ Covers all devices — free version available
The link is an affiliate link — SecNews may receive a commission at no additional cost to you. It does not affect the independence of our article writing.
The question is whether platforms should be held legally liable when they fail to protect their users. There have been similar discussions in the Apple app store or Google Play. Gaming, which has now become a multi-billion dollar industry, cannot be left out.
See also: Apple fleets: AI phishing attacks make identity security a priority
Security as the next big challenge in gaming
Block Blasters is not the only incident. Previously, titles like Chemia, Sniper: Phantom's Resolution , and PirateFi were used in a similar way to spread malware. If all of this teaches us anything, it's that we are facing a new form of threat, where games are not just a means of entertainment but a vehicle for cybercrime.
The solution may lie in three axes:
- Stricter controls by distribution platforms.
- Educating users to be more suspicious of unknown games.
- Better management of crypto assets, with separate wallets and hardware solutions.
The Block Blasters case is a wake-up call for the entire gaming industry. The days when the biggest threat to a gamer was bugs or lag spikes are long gone. Today, games can become a Trojan horse for attacks that threaten not only people's digital lives, but also their real lives.
Security is no longer a luxury but a necessary condition for gaming to continue to be a space of creativity and entertainment without fear.
Source: www.bleepingcomputer.com
