Malware
Ongoing coverage on Malware.
Latest coverage
After Infecting PCs With Malware, Gacha Game Gives Out Free Loot Boxes To Apologize
The developers of the gacha RPG Duet Night Abyss, Pan Studio, have apologized for a cybersecurity incident that infected players' PCs with malware via a game launcher update patch. The malware, identified as Trojan:MSIL/UmbralStealer.DG!MTB, is an infostealer. In response, Pan Studio is offering players 10 free gacha pulls and other in-game rewards as compensation.
If you were scammed by malware hiding in your Steam games, the FBI wants to hear all about it
The FBI is seeking information from individuals who have been victims of malware distributed through games on the Steam platform. Several specific games, including BlockBlasters and Tokenova, have been identified as sources of malware that operated between May 2024 and January 2026, with some instances leading to significant financial loss through cryptocurrency theft.
The FBI is looking into Steam games loaded with malware—and one is still up on the store
The FBI's Seattle Division is investigating Steam games found to contain malware, with some titles released as recently as January 2024 still available on the platform. Games like Lampy, BlockBlasters, and PirateFi have been identified, with BlockBlasters reportedly stealing over $150,000 in crypto. While some games have been removed, Lampy remains active on Steam.
The FBI is hunting down malware-loaded games on Steam
The FBI is investigating a series of malware-infected games distributed on the Steam platform between May 2024 and January 2026. The agency is seeking information from players who downloaded titles like BlockBlasters, Chemia, and PirateFi, which contained malicious software capable of stealing personal data. Valve is cooperating with the investigation and has removed some affected games from its platform.
FBI Launches Investigation Into Games Removed From Steam Over Malware Concerns
The FBI's Seattle Division has launched an investigation into several games removed from Steam for allegedly spreading malware. Players who downloaded titles like BlockBlasters, Chemia, and PirateFi between May 2024 and January 2026 are urged to report if they were victimized. Valve is not a target of the investigation.
Evening Safety Dance
WordPress websites are being compromised by cybercriminals who are then distributing infostealer malware. This security threat targets user data through these compromised sites.
Malwarebytes says a fake Google Account security page is distributing 'what may be one of the most fully featured browser-based surveillance toolkits we have observed in the wild'
Cybersecurity firm Malwarebytes has identified a sophisticated phishing campaign using a fake Google Account security page to distribute a highly capable browser-based surveillance toolkit. This malware can infect Windows, macOS, and Android devices, capable of clipboard monitoring, SMS interception, and even acting as a WebSocket relay to bypass network security. The Android version includes a custom keyboard for keystroke logging and notification listening for two-factor authentication codes.
