Steam Removes Chemia After Malware Found Targeting Crypto Wallets

Steam has removed the survival game Chemia from its store after cybersecurity researchers discovered it contained malware designed to steal crypto wallet data and browser information. The malicious code was linked to a hacker group known as EncryptHub.

Good to Know

• Chemia’s files were injected with three malware strains targeting crypto wallets and personal data.
• The malware used Telegram and remote servers to stay hidden while stealing information.
• Players who previously downloaded Chemia should scan their systems immediately.

Malware Hidden in Chemia

Chemia, developed by Aether Forge Studios and released on Steam’s Early Access, appeared to be a typical survival crafting title. However, researchers at cybersecurity firm Prodaft reported that on July 22, hackers injected the game with three malware types: HijackLoader, Vidar Stealer, and Fickle Stealer.

These tools allowed hackers to take control of infected systems and steal crypto wallet keys, browser cookies, passwords, and autofill data. The malware remained undetected by quietly running in the background without affecting gameplay.

Prodaft found that the attackers used Telegram for instructions and fetched additional malicious files through remote servers. This method gave EncryptHub complete control over infected devices.

Steam Removes the Game

Once the issue was reported, Steam pulled Chemia from its store. The game’s page now redirects to Steam’s homepage, and neither Valve nor the developer has made a public statement. Early Access titles on Steam have faced criticism before for weaker safety checks, making them easier targets for hackers.

This isn’t the first case of malware on Steam. Similar incidents involved Sniper: Phantom’s Resolution and PirateFi, both of which were also early access games. These recurring problems raise questions about Steam’s review process for games still in development.

Wider Concerns

EncryptHub has a track record of cyberattacks. The same group previously ran a global phishing campaign impacting over 600 organizations. Malware infections continue to rise, with Statista reporting an 87% increase over the past decade and cybersecurity damages projected to reach $10.5 trillion by 2025.

For now, Chemia is no longer available, but users who already downloaded it should immediately run antivirus scans and review their crypto and personal accounts for suspicious activity. Until Valve and Aether Forge Studios confirm the game is safe, security experts recommend avoiding any attempt to reinstall it.