Streamer Loses $32K to Malware on Steam

A serious malware attack involving a Steam game has left a Twitch streamer without critical funds meant for medical treatment. RastalandTV, a streamer who has been open about his fight against stage-4 cancer, lost over $32,000 in cryptocurrency during a livestream after downloading a game called BlockBlasters.

Funds Raised Through Pump.fun

The money was part of a community fundraising effort that began on Pump.fun, a Solana-based meme coin platform that launched in early 2024. RastalandTV used the service to create a token named $CANCER, designed to help cover his treatment expenses.

During a September 21 livestream, a viewer suggested he try BlockBlasters, which appeared to be a simple indie platformer available on Steam. Shortly after launching the game, his wallet holding creator fees from Pump.fun was drained. The theft happened live on stream, with his reaction quickly circulating online.

Streamer Loses $32K to Malware on Steam

Community Rallies After the Breach

News of the hack spread quickly across the crypto and streaming communities. Within hours, popular crypto figure Alex Becker stepped in, sending $32,500 to a secure wallet, effectively covering the stolen funds. Other creators and community members also offered support, and by the following day, RastalandTV posted a public thank you, noting the overwhelming response he received from viewers and the broader crypto audience.

How BlockBlasters Delivered Malware

Investigations revealed that BlockBlasters, developed by Genesis Interactive, was first released on July 30, 2025 without issues. However, an update pushed on August 30 included malicious code. Security firm G Data explained that this update installed scripts capable of stealing credentials, wallet keys, and browser data. One of the key components, game2.bat, scanned for antivirus software and extracted Steam and browser information before sending it to an external server.

Additional files installed backdoors and a stealer program linked to the StealC malware family, which collected autofill data and saved passwords. To avoid detection, the malware even modified Microsoft Defender settings. The infected build remained available for nearly a month and, according to SteamDB, was downloaded more than 100 times before being taken down.

Streamer Loses $32K to Malware on Steam

Growing Concerns Over Steam’s Security

Security researchers estimate that the malware drained more than $150,000 in total, affecting hundreds of accounts. Well-known blockchain investigator ZachXBT criticized Valve for failing to remove the game sooner, pointing out that it had been live long enough to cause significant losses. This is not the first case of malware tied to Steam titles. In July 2025, the game Chemia was removed after being linked to malware developed by a group known as EncryptHub.

Another title, PirateFi, was also flagged for malicious code. The BlockBlasters case has renewed questions about Steam’s verification process. Many players assumed the “Verified” label signaled safety, but it only indicates compatibility with Steam Deck hardware, not security.

While the financial support from Becker and the broader community helped restore what was lost, the incident highlighted the risks involved in downloading lesser-known games from official storefronts. For RastalandTV, the hack not only jeopardized his treatment funding but also became a very public reminder of how security breaches in gaming can have life-altering consequences.

Streamer Loses $32K to Malware on Steam

Frequently Asked Questions (FAQs)

What happened to RastalandTV?

RastalandTV, a Twitch and Pump.fun streamer battling stage-4 cancer, lost over $32,000 in crypto during a livestream after downloading a Steam game called BlockBlasters, which had been compromised with malware.

What is Pump.fun and how was it involved?

Pump.fun is a web3 platform on Solana that allows users to create and trade meme coins. RastalandTV launched a token called $CANCER to raise money for his medical treatment, and the stolen funds came from those earnings.

How did the malware work?

The malware was introduced in a late-August update to BlockBlasters. It used scripts to disable antivirus detection, steal credentials, and extract wallet keys, then sent the stolen data to external servers.

How much money was stolen in total?

Security researchers estimate that the malware attack drained more than $150,000 across hundreds of accounts, with over 100 downloads of the infected game recorded on Steam.

Did Valve comment on the incident?

Valve has not issued an official statement on the BlockBlasters incident. The game has since been removed from Steam, but questions remain about how long it was available and why it passed through security checks.

Is the Steam “Verified” badge a security check?

No. The “Verified” badge on Steam indicates that a game is compatible with Steam Deck hardware. It does not confirm whether a game has been checked for malware or security threats.