Finder makes money from featured partners, but editorial opinions are our own.

Cryptojackers have made their way into Steam games

shutterstock computer bug virus 450x250

A game called Abstractism has been pulled from the store for allegedly infecting people's computers.

Indie platformer Abstractism has been pulled from the Steam stores after a series of allegations culminating in reports that it installs cryptocurrency miners on players' computers.

Installing or running cryptocurrency miners on people's systems without their knowledge or permission is known as cryptojacking, and it's all the rage in malware circles these days.

Cryptojacking has taken many forms, with the most similar to this perhaps being the Andy Android emulator, which was also found to be installing crypto miners on people's systems without their knowledge.

According to a Steam statement, Abstractism was pulled from the store for several reasons.

"We have removed Abstractism and banned its developer from Steam for shipping unauthorized code, trolling with content, and scamming customers with deceptive in-game items," it said.

The trail

Abstractism has been available since 15 March, but things only came to a head recently when a relatively well-known Steam marketplace trader was tricked into buying a worthless scam item that originated in Abstractism.

From there, others started saying that trying to install the game would trigger virus malware warnings, and that actually running it was consuming an inordinate amount of computing power.

An update from 23 July also strongly suggests that it's all about tricking people into crypto mining, with an in-game rewards system geared towards encouraging people to leave the game running for longer periods of time.

Cryptojacker game theory

It did this with a "dynamic" item drop time, where the time between each increases with playtime.

This is because cryptojacker earnings are dependent mostly on how much time a victim contributes to it, and the best returns will often come from malware that remains undetected for a long period of time, rather than the ones which get greedy and siphon off a too-obvious amount of computing power.

"You need 15 minutes to receive the first drop, 30 minutes for the second drop, 60 minutes for the third drop and so on," the update reads. You receive more rare items if your playtime is long ("60 minutes" item drops are better than "15 minutes" drops)."

A player could receive a maximum of 7 items per week, and assuming the vague update means the drop time doubles each time, that means someone would need to leave the game running for 16 straight hours to receive the "best" tier items.

"Drops limit resets on friday and you should be in game to allow Abstractism reset it," the update says.

The entire system is seemingly geared towards encouraging people to just leave the game running in the background for days on end – perfect for crypto mining.

What's being mined?

In response to accusations of cryptojacking, the seller assured people that the game wasn't a bitcoin miner.

This is a safe bet because someone would need an incredible amount of infected GPUs to make bitcoin mining worthwhile. Others also accused it of mining Monero, which they also denied.

"Abstractism Launcher and Abstractism Inventory Service are not Bitcoin miner (and are not Monero miner too, honestly)," they said.

Monero would be a more reasonable and profitable bet, with its GPU-friendly mining and hard forks to keep it that way. But the developer denies that too, and they might well be telling the truth. It doesn't really matter which coin they're mining though. There are plenty of options out there, and the main thing is that it was almost certainly mining something before being removed.

It also raises the question of whether other Steam games might have cryptocurrency miners hidden in them, and whether Steam can or should be doing more to sift through listings before they go up.

Disclosure: At the time of writing, the author holds ETH, IOTA, ICX, VET, XLM, BTC and ADA.

Disclaimer: This information should not be interpreted as an endorsement of cryptocurrency or any specific provider, service or offering. It is not a recommendation to trade. Cryptocurrencies are speculative, complex and involve significant risks – they are highly volatile and sensitive to secondary activity. Performance is unpredictable and past performance is no guarantee of future performance. Consider your own circumstances, and obtain your own advice, before relying on this information. You should also verify the nature of any product or service (including its legal status and relevant regulatory requirements) and consult the relevant Regulators' websites before making any decision. Finder, or the author, may have holdings in the cryptocurrencies discussed.

Latest cryptocurrency news

Picture: Shutterstock

Get started with crypto

Ask an Expert

You are about to post a question on

  • Do not enter personal information (eg. surname, phone number, bank details) as your question will be made public
  • is a financial comparison and information service, not a bank or product provider
  • We cannot provide you with personal advice or recommendations
  • Your answer might already be waiting – check previous questions below to see if yours has already been asked

Finder only provides general advice and factual information, so consider your own circumstances, or seek advice before you decide to act on our content. By submitting a question, you're accepting our Terms of Use, Disclaimer & Privacy Policy and 6. Finder Group Privacy & Cookies Policy.

This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.
Go to site