A verified Steam game, BlockBlasters, was used to distribute malware, resulting in the theft of over $150,000 in cryptocurrency from hundreds of users. The incident highlights the dangers of malicious game components and targeted attacks on crypto-rich accounts. #BlockBlasters #SteamSecurity
Keypoints
- BlockBlasters was a legitimate-looking game available on Steam before malicious code was added.
- The cryptodrainer component in the game led to widespread theft of cryptocurrency from affected users.
- Attackers targeted Steam users involved in managing significant cryptocurrency assets.
- Experts uncovered various payloads, including a dropper script, backdoor, and payloads for data theft.
- Users are advised to reset passwords and move assets to secure wallets if they’ve downloaded the game.