A 21-year-old Florida man has been arrested for allegedly helping run a malware campaign that used malicious games on Steam to steal more than $220,000 in cryptocurrency from users. The arrest follows an FBI investigation that traced stolen funds through digital gift cards and food delivery orders.
According to an FBI criminal complaint, the campaign operated between May 2024 and February 2026, infecting nearly 8,000 devices and compromising almost 80 cryptocurrency wallets. The malware was hidden in games uploaded to Steam, allowing attackers to gain access to victims’ systems and steal digital assets.
The accused, Zyaire Wilkins of North Lauderdale, Florida, has been charged with conspiracy to obtain information by computer for private financial gain. If convicted, he faces a maximum sentence of 10 years in prison.
Eight Steam Games Named in Complaint
Investigators allege the group distributed eight malware-infected games through Steam over nearly two years. Once installed, the games deployed malware capable of accessing cryptocurrency wallets on infected computers. The games named in the complaint include:
- BlockBlasters
- Chemia
- Dashverse (DashFPS)
- Lampy
- Lunara
- PirateFi
- Tokenova
Some of the titles were removed from Steam after security concerns were reported. The FBI says the games were promoted through Discord, Telegram, X (formerly Twitter), and LinkedIn, targeting users known to own or trade cryptocurrency.
FBI Followed Cryptocurrency Transactions
The investigation advanced after agents traced stolen cryptocurrency used to purchase more than 150 digital gift cards through Bitrefill. According to court documents, many of those gift cards were redeemed for Uber Eats orders. Investigators used the associated phone numbers, delivery addresses, and transaction records to identify Wilkins as a suspect.
The criminal complaint was filed in Washington state, where Valve, the company behind Steam, is based.
Investigation Underway
Federal agents claim that this was a team effort and that investigations are ongoing. They are trying to find more victims and establish the role played by other suspects. The FBI says this malware attack affected around 8,000 devices, accessed 80 crypto wallets, and stole at least $220,000 worth of cryptocurrency.
Wilkins faces charges but has not been found guilty. The accusations made in the criminal complaint will be proved or refuted in court.