.png){kind=logo}
A 21-year-old Florida man has been arrested for allegedly helping run a malware campaign that used games on Steam to steal more than $220,000 in cryptocurrency from users.
According to an FBI criminal complaint, the campaign operated between May 2024 and February 2026, infecting nearly 8,000 devices and compromising nearly 80 cryptocurrency wallets. The malware was hidden in games uploaded to Steam, allowing attackers to gain access to victims' systems and steal digital assets.
The accused, Zyaire Wilkins of North Lauderdale, Florida, has been charged with conspiracy to obtain information by computer for private financial gain. The charge carries a maximum sentence of 10 years in prison if he is convicted.
Investigators allege the group distributed eight malware-infected games through Steam over nearly two years. Once installed, the games allegedly deployed malware capable of accessing cryptocurrency wallets on infected computers.
The games named in the complaint include BlockBlasters, Chemia, Dashverse (DashFPS), Lampy, Lunara, PirateFi and Tokenova. Some of the titles were removed from Steam after security concerns were reported.
The FBI says the games were promoted through Discord, Telegram, X (formerly Twitter) and LinkedIn. The campaign allegedly targeted users known to own or trade cryptocurrency.
The investigation advanced after agents traced stolen cryptocurrency used to purchase more than 150 digital gift cards through Bitrefill.
According to court documents, many of those gift cards were redeemed for Uber Eats orders. Investigators used the associated phone numbers, delivery addresses, and transaction records to identify Wilkins as a suspect.
The criminal complaint was filed in Washington state, where Valve, the company behind Steam, is based.
Also Read: Ultimate List of the Best Steam Games for Every Gamer in 2026
Federal agents claim that this was a team effort and that investigations are ongoing. They are trying to find out more victims and establish the role played by the other suspects.
The FBI says that this malware attack affected around 8,000 devices, had access to 80 crypto wallets, and stole at least $220,000 worth of cryptocurrency.
Wilkins faces charges but has not been found guilty of the crime. The accusations made in the criminal complaint will be proved or refuted in court.
