Federal authorities arrested 21-year-old Zyaire Wilkins of Florida, suspected of stealing at least $220,000 in cryptocurrency through malware-infected games on the Steam platform. According to the indictment, Wilkins and his accomplices created and marketed eight malware-infected games that infected approximately 8,000 devices and accessed 80 crypto wallets from May 2024 to February 2026.
Course of the Attack
The malware was hidden in games such as BlockBlasters, Chemia, Dashverse/DashFPS, Lampy, Lunara, PirateFi, and Tokenova. The perpetrators promoted these games on social media and communication platforms like Discord, Telegram, X/Twitter, and LinkedIn. After downloading the game, the malware stole victims' private information and drained their crypto wallets.
Investigation and Arrest
Federal agents linked Wilkins to the case through his crypto wallet address, which they found in messages with an alleged accomplice. They traced the address to a Bitrefill account where Wilkins purchased more than 150 gift cards, including Uber Eats. This led to his phone number and address. Wilkins was arrested on July 14 and charged with conspiracy to obtain information via a computer for private financial gain.
The FBI previously called on victims to come forward in connection with the Steam malware investigation. Valve, the operator of Steam, did not respond to a request for comment.