The FBI is investigating a malware campaign that stole at least $220,000 from cryptocurrency wallets after victims downloaded infected video games. The attackers compromised at least 80 wallets by concealing malicious code inside game installers, according to the agency. The FBI is now seeking potential victims and working to trace the stolen funds.
How the malware worked
The malware was hidden inside downloadable video games — likely pirated or unofficial copies. When users ran the infected files, the malware extracted private keys and seed phrases from their crypto wallets. The FBI hasn't named the specific games used, but the agency warned the installers were designed to look legitimate.
The campaign came to light after a spike in wallet compromise reports. The total confirmed losses sit at $220,000, though the real number could be higher as more victims come forward.
What the FBI is doing now
The agency has issued a public alert and is asking anyone who suspects their wallet was compromised to file a report with the FBI's Internet Crime Complaint Center (IC3). Victims should include transaction details and wallet addresses. The FBI also recommends moving any remaining funds to a new wallet immediately and running a full security scan on the affected device.
What users should watch for
This isn't the first time malware has been hidden in game downloads, but the scale of the wallet compromise is notable. The FBI advises sticking to official sources for game downloads, using hardware wallets for long-term storage, enabling two-factor authentication on exchange accounts, and keeping wallet software and antivirus tools updated.
The timing isn't great for an industry already dealing with phishing scams and exchange hacks. A $220,000 haul might seem small compared to some exchange breaches, but for individual victims, losing access to their wallets can be devastating.
The investigation is ongoing. The FBI hasn't identified the attackers or the specific games used in the campaign. More victims may surface as word spreads. Crypto users should stay alert for suspicious downloads and monitor their wallets for unauthorized transactions — the malware may still be active on compromised machines.
