Overview
- Block Blasters was delisted from Steam on September 21 after investigators said a malicious component was introduced on August 30.
- Latvian streamer RastaLandTV lost roughly $32,000 live during a charity stream for cancer treatment, and crypto influencer Alex Becker said he sent $32,500 to a safe wallet to cover the loss.
- Estimates of broader theft vary, with ZachXBT citing about $150,000 across 261 accounts and VXUnderground listing 478 potential victims while urging immediate password resets.
- Technical analyses describe a batch dropper that exfiltrated Steam credentials and IP addresses to a C2 server, alongside a Python backdoor and a StealC payload, with exposed Telegram bot tokens revealing operational lapses.
- Investigators say targets were approached via X with test invitations for the game, and reporters had not received a response from Valve by publication time.