The Game Worked. The Malware Did Too.

Steam Malware, Physical-Mail Phishing and the Collapse of Blind Trust Podcast Description The game opened. It ran normally. But hidden in the background, malware was allegedly searching thousands of computers for cryptocurrency wallets and credentials worth stealing. In Case File #70, U.S., the Hard Working Crypto Sleuth, investigates a Steam malware campaign tied to infected video games, approximately 8,000 compromised devices, around 80 exposed wallets and more than $220,000 in alleged crypto theft. The episode also examines personalized physical letters targeting Ledger owners, QR codes designed to steal 24-word recovery phrases and the Jscrambler supply-chain compromise that allowed malicious software to be published through a legitimate npm namespace. This week’s lesson is simple: official does not always mean safe, working software is not necessarily clean and accurate personal information does not prove a security warning is real. Plus, Beginner’s Corner explains why trusted platforms still require verification, the Action Required section gives listeners practical steps to protect wallets and developer environments, and the HundredCoin Spotlight explores why patience remains one of crypto’s most underrated security tools. Security First. Hype Doesn’t Last.