FBI Probes Malware in Steam Games, Valve Urges Victims to Help

Key Takeaways

1. The FBI is investigating malware-ridden Steam games and has listed affected titles, urging victims to report their experiences.
2. Eight offenders have been identified, with games like BlockBlasters and DashFPS launching as safe but later introducing malware.
3. Community reactions include skepticism about Valve’s communications, as scammers often impersonate government agencies.
4. Community mods in games like People Playground can be compromised, leading to potential data loss or severe system failures.
5. Valve faces criticism for inadequate screening of games before listing them, complicating the moderation process due to the influx of new titles.

After several malware-ridden Steam games were discovered in recent years, the FBI has started to pay attention. On its website, the bureau has outlined a list of affected games and is urging victims to fill out a form with more details. Valve has confirmed the authenticity of this message and is encouraging gamers to help with the ongoing investigation.

Investigation Unveiled

The Seattle Division of the FBI has pinpointed eight offenders that appeared in the market from May 2024 through January 2026. While most of these were lesser-known indie games, they still managed to generate enough interest to cause harm. Titles such as BlockBlasters, Chemia, DashFPS, and PirateFi are among the projects that negatively impacted players.

Community Reactions

A user on the Steam subreddit shared an email from Valve regarding the investigation. Specifically mentioning the now-removed DashFPS, it stated there was “cooperation with law enforcement.” The company has urged anyone who downloaded the game to reach out to the FBI. Some gamers found the message suspicious, as scammers often pretend to be from government agencies.

Attack Methods

In cases like BlockBlasters, a game might initially launch smoothly and build player trust. However, developers can later roll out an update that introduces malware or a virus. By using a hidden batch script, BlockBlasters specifically targeted cryptocurrency wallets, aiming to steal saved credentials from PCs. This case drew significant attention when a streamer lost over $30,000 while broadcasting live.

Risks in the Community

The popular sandbox game People Playground highlighted the dangers of community mods being compromised by rogue viruses. In the best-case scenario, players might only lose their saved data. However, in worse situations, they could experience complete system failure or have their bank accounts emptied.

Valve’s Response

Valve usually acts quickly to remove Steam games that are found to be hiding malware following user complaints. Nevertheless, it has faced backlash for not properly screening harmful titles before they are listed on the platform. The issue is compounded by the low cost of publishing a game on the marketplace. Valve’s moderation teams are finding it difficult to manage the increasing number of new submissions.

The FBI may reach out for an interview after someone submits a form or email. It remains uncertain if law enforcement in other countries is conducting similar investigations.

Source:
Link