The FBI’s Seattle division is investigating a hacker who embedded malware in multiple Steam games over roughly the past two years. The games identified so far include BlockBlasters, Chemia, Dashverse/DashFPS, Lampy, Lunara, PirateFi, and Tokenova. Investigators believe all of them are the work of a single threat actor.
The malware was designed to drain cryptocurrency wallets and hijack user accounts. The games were functional enough to pass as legitimate releases, essentially using playable games as trojan horses to steal credentials from unsuspecting players.
Valve has been removing the games and notifying affected users, but the sheer volume of new titles on Steam has made it difficult to catch everything before damage is done. The company hasn’t publicly commented on the investigation.
This follows a pattern of similar incidents in 2025, where malicious actors published working games on Steam specifically to distribute malware to gamers.
If you think you may have downloaded one of these titles, the FBI is actively seeking victims. People who were infected may be eligible for restitution under federal law by submitting a form at <a href="http://fbi.gov" target="_blank" rel="noopener nofollow">fbi.gov</a>.

Collections

The FBI's Seattle division is investigating a threat actor who embedded malware in at least seven Steam games over roughly two years. The games — including BlockBlasters, Chemia, PirateFi, and others — were functional enough to appear legitimate but were designed to drain cryptocurrency wallets and steal account credentials. Valve has been removing the titles and notifying affected users, though the high volume of Steam releases makes early detection difficult. The FBI is actively seeking victims, who may be eligible for restitution under federal law.

FBI investigating malware hidden in Steam games that stole crypto and account credentials