Fbi investigates malware-infested games on steam, millions potentially affected

The FBI has launched an investigation to identify victims of malware distributed through games on Steam, urging users who downloaded specific titles between May 2024 and January 2026 to come forward.

Steam games linked to malware spark fbi probe

The agency is focusing on at least seven games – BlockBlasters, Chemia, Dashverse, Lampy, Lunara, PirateFi, and Tokenova – that were compromised during that period. While none of these titles are from major franchises, some had previous warnings regarding malicious code.

PirateFi, a free-to-play game released on February 6, 2024, drew particular attention. Reports indicated the game contained code designed to steal account credentials and personal information. Valve removed it shortly after its launch, but hundreds of users had already downloaded it. The malware often targeted passwords and session cookies, granting attackers access to user accounts.

BlockBlasters, a 2D platformer launched in July 2025, followed a similar pattern. A month later, a component was added to the game to steal cryptocurrencies. Subsequent investigations revealed that the malware had stolen approximately $150,000 from several affected accounts.

The FBI emphasizes its legal obligation to identify victims of federal crimes, allowing them access to potential services, financial compensation, and legal protection. This incident, though rare on Steam, underscores the persistent vulnerability of even popular platforms to security threats. The investigation highlights a darker side of online gaming: a constant cat-and-mouse game between developers and malicious actors.

The speed at which these threats can spread underscores the need for vigilance. While Steam has implemented security measures, the sheer volume of games and user activity makes complete protection an ongoing challenge. Victims are advised to monitor their accounts for suspicious activity and change passwords if they suspect compromise. The FBI’s pursuit of those responsible suggests a long road ahead in holding accountable those who exploit the trust of gamers.