Steam has removed the BlockBlasters game, which turned out to be a crypto-drainer and stole over $150,000 from users, including $32,000 from Latvian streamer Raivo Plavnieks (RastalandTV). The case was reported by BleepingComputer.
BlockBlasters was a 2D platformer that was released on Steam on July 30, 2025. The game was initially safe, but on August 30, the developers added a component to steal cryptocurrency assets with an update. The game was published by Genesis Interactive, but has now been removed from Steam.
The game's malicious capabilities were revealed during a charity stream by Latvian gamer Raivo Plavnieks (RastalandTV), who was raising funds for the treatment of stage 4 sarcoma. Along with the $32,000 lost, the crypto community also recorded the theft of assets from other users.
According to cryptocurrency investigator ZachXBT, at least 261 Steam accounts were attacked, with total losses of about $150,000. The VXUnderground group reports 478 victims and has published a list of users who are advised to change their passwords.
The crypto community reacted quickly to the incident. Influencer Alex Becker announced that he had compensated the streamer $32,500 so that the funds could be used again for treatment. At the same time, a GoFundMe campaign was launched, which has already raised more than half of the required amount.
Researchers noted that the hijacker scans the system environment, steals Steam credentials and IP addresses, and then transmits them to a control server. Additionally, Python backdoor and StealC activity were recorded.
Cybersecurity experts also found lapses in the operational security of the attackers: tokens and the code of the Telegram bot used to manage the infrastructure remained publicly available. According to unconfirmed reports, the organizer of the attack may be a migrant from Argentina living in Miami.
By the way, this is not the only case. Previously, other games that also contained malware were removed from Steam, including Chemia, Sniper: Phantom's Resolution, and PirateFi.