Free Steam Games Turned Out to Be a Trap: Scammers Stole $220,000 Through Them

A love of free games resulted in major losses for thousands of Steam users. A group of attackers uploaded games to the platform containing malware that, once installed, secretly collected computer owners’ personal data and gained access to their cryptocurrency wallets.

According to investigators, the scheme operated for nearly two years. During that time, the scammers published at least eight games, including BlockBlasters, PirateFi, Chemia, Lunara, Dashverse, Lampy and Tokenova. At first glance, these appeared to be ordinary indie projects, but the games also installed a crypto stealer on the computer — a virus designed to steal passwords, browser data, files containing saved account credentials and cryptocurrency wallet information.

After a device was infected, it began secretly transmitting the collected data to the attackers. If the virus detected access to cryptocurrency wallets, the funds were quickly transferred to addresses controlled by the criminals. Over the course of the scheme, around 8,000 computers were infected, at least 80 cryptocurrency wallets were compromised, and the total value of the stolen cryptocurrency exceeded $220,000.

To distribute the games, the criminals used not only Steam but also actively promoted their projects on Discord, Telegram, X and LinkedIn, trying to create the impression that they were promising independent releases. Some of the games were downloaded by hundreds of users before cybersecurity specialists noticed the suspicious activity.

One of the best-known games was BlockBlasters. It first attracted widespread public attention after one user lost tens of thousands of dollars in cryptocurrency shortly after installing it. Following complaints, the game was removed from Steam, and the investigation eventually helped identify the organizers of the scheme.

Experts note that this case is one of the clearest examples of how attackers exploit popular gaming platforms to distribute malware. Despite verification systems, it is impossible to completely prevent similar applications from appearing, so users are advised to be cautious with little-known free games, check reviews and developers’ reputations, and avoid storing cryptocurrency wallet credentials on devices used to install questionable software.