Who should report Steam malware to the FBI?

FBI opens investigation into malware hidden inside Steam titles

Federal investigators have launched an inquiry into a wave of discoveries showing that some games on Steam contained malicious code. The bureau is asking people affected by those titles to come forward so agents can build a clear picture of how the schemes operated and who was harmed.

The inquiry follows the removal of several suspicious games from Valve’s storefront earlier this year, although at least one reportedly problematic title remained available. The FBI’s outreach is intended to identify victims, trace how the malware spread, and determine whether the same actors are responsible for multiple infections.

What investigators are trying to gather

• Basic contact details for people who installed or purchased affected titles
• The names or Store pages of the games involved
• Dates and times when malware symptoms first appeared
• Descriptions of system behaviour, data loss, or financial impact
• Any screenshots, logs, or other files showing the infection

Why reporting matters

Law enforcement needs concrete victim reports to tie digital traces to real-world harm. Victim accounts can help investigators locate server infrastructure, correlate attack patterns, and pursue legislative or civil remedies when criminal networks are involved. The evidence also helps inform Valve and other platforms on gaps in their discovery and moderation systems so they can improve store protections.

What remains unclear

It’s still unknown how many people were affected in total and whether all malicious titles have been removed. Valve has taken down several entries, but Steam’s huge library means bad actors can still try to slip new builds through. The FBI’s call for reports is a chance for anyone who thinks they were targeted to help shape the investigation and limit further damage.