The FBI has arrested a 21-year-old Florida man suspected of orchestrating a cryptocurrency theft scheme totaling approximately $220,000. The alleged operation involved embedding malware into eight video games distributed on Steam, which, upon download, were designed to extract passwords from victims' computers to access their cryptocurrency wallets.
According to an indictment, the suspect and several co-conspirators allegedly ran this cybercrime operation for about two years. Investigators tracked the stolen Bitcoin to gift cards, which were reportedly used to purchase everyday items like food delivery. The games implicated in the scheme include Lunara, PirateFi, BlockBlasters, and Lampy, the latter of which was reportedly infected after an update. These titles were removed from Steam earlier this year, coinciding with an FBI investigation into malware distribution on the platform.
As the volume of games released by independent creators grows, and with advancements in game development tools potentially accelerating production, concerns are rising about the increasing prevalence of such malicious activities. The FBI's action in this case may serve as a deterrent, while also highlighting the ongoing need for digital storefronts to develop robust systems for preventing the distribution of malware.