CyberHappenings logo
☰
🏠 Home 📂 Browse ℹ️ About

Track cybersecurity events as they unfold. Sourced timelines, daily updates. Fast, privacy‑respecting. No ads, no tracking.

Steam game BlockBlasters steals $150,000 from 261 users

First reported
Last updated
📰 1 unique sources, 1 articles

Summary

Hide ▲

A verified Steam game named BlockBlasters was discovered to have been modified to include a cryptocurrency drainer. The game was available on Steam between July 30 and September 21, 2025. The malicious component was added on August 30, 2025. The game drained $32,000 from a streamer's cryptocurrency wallet, who was raising funds for cancer treatment. The total amount stolen from 261 Steam accounts is estimated to be $150,000. The game was published by Genesis Interactive and was removed from Steam on September 21, 2025. The attack targeted users managing significant cryptocurrency amounts, identified via Twitter.

Timeline

  1. 22.09.2025 12:28 📰 1 articles · ⏱ 5h ago

    Steam game BlockBlasters modified to include cryptocurrency drainer

    BlockBlasters, a 2D platformer game, was available on Steam from July 30, 2025, to September 21, 2025. The game was modified on August 30, 2025, to include a cryptocurrency drainer. The game drained $32,000 from a streamer's cryptocurrency wallet and a total of $150,000 from 261 Steam accounts. The attack targeted users managing significant cryptocurrency amounts, identified via Twitter. The malicious component was a batch script that collected Steam login information and IP addresses, uploading the data to a C2 system. The attack involved a Python backdoor and a StealC payload, and the attackers left their Telegram bot code and tokens exposed.

    Show sources
    Open in new tab

Information Snippets