FBI Investigating After Malware Found Lurking in Steam PC Games

The FBI is investigating the distribution of malware by means of a number of video video games hosted on Steam, the favored PC gaming platform operated by Valve.

The company mentioned Friday it’s looking for victims whose computer systems could have been contaminated after downloading video games believed to comprise malicious software program.

“The FBI believes the menace actor primarily focused customers between the timeframe of Could 2024 and January 2026,” the company wrote.

The FBI’s investigation is focusing on a number of PC video games, together with BlockBlasters, Chemia, Dashverse, DashFPS, Lampy, Lunara, PirateFi, and Tokenova.

Final summer time, a number of video games, together with Chemia and PirateFi, had been eliminated by Steam after they had been found to incorporate malware.

Steam is among the largest digital distribution platforms for PC video games. In 2025, Steam reached over 132 million month-to-month energetic customers with over 117,000 video games. Whereas the contaminated titles seemed to be video games and had been permitted on the market on the platform, the FBI says they as a substitute put in malware on gamers’ computer systems.

The FBI is looking for information from avid gamers who could have been affected by the malware.

“The FBI is legally mandated to determine victims of federal crimes it investigates,” an FBI spokesperson informed Decrypt. “Victims could also be eligible for sure providers, restitution, and rights beneath federal and/or state regulation. All identities of victims will likely be stored confidential,” they mentioned, including that the company is unable to offer particular particulars.

Decrypt reached out to Valve for touch upon the investigation, however didn’t instantly obtain a response.

Malware focusing on avid gamers has appeared in each sport downloads and third-party instruments linked to well-liked titles.

Again in 2023, a fan game based mostly on Nintendo’s Tremendous Mario franchise was discovered to comprise malware able to hijacking cryptocurrency wallets, deploying software program designed to steal passwords, and putting in crypto-mining software program that ran within the background on contaminated computer systems.

In March 2024, cybersecurity agency VX Underground warned that gamers trying to find cheat software program for the first-person shooter collection Name of Responsibility had been uncovered to malware able to draining Bitcoin wallets. It’s unknown how many individuals had been affected, however VX Underground mentioned the assault probably affected greater than 4.9 million gaming accounts throughout a number of platforms.

And in December, Kaspersky identified an infostealer malware in pirated mods for Roblox and different video games.