FBI arrests man accused of using Steam games to drain victims’ crypto wallets

FBI agents arrested Zyaire Wilkins, a 21-year-old Florida resident and student, on Tuesday, accusing him of orchestrating a cybercrime operation that used malware-infected video games distributed on Steam to steal cryptocurrency from thousands of victims. Prosecutors allege Wilkins and unnamed co-conspirators uploaded over a dozen fake games onto the Steam platform, each containing malicious software designed to compromise users' systems and siphon funds from their digital wallets. The alleged scheme, which spanned more than two years, resulted in approximately 8,000 infections and the theft of at least $220,000 in cryptocurrency. According to a criminal complaint filed by U.S. prosecutors, Wilkins and his associates published several malware-laced titles, including BlockBlasters, Dashverse, Lampy, Lunara, and PirateFi. These games appeared legitimate, allowing users to download and install them without immediate suspicion. However, once activated, the embedded malware infiltrated users' computers, harvested login credentials, and accessed cryptocurrency wallets. The stolen funds were then funneled into a shared account, from which the perpetrators reportedly distributed proceeds among themselves. Authorities revealed that the criminals marketed their fraudulent games on platforms such as Discord, LinkedIn, and Telegram, targeting potential victims through social media channels. The FBI identified one of the conspirators during an interview, who admitted to working with others to generate revenue by launching and promoting the malicious games. In exchange, participants would receive a share of the illicit earnings. The agency traced transactions linked to a specific cryptocurrency wallet, which was used to purchase gift cards for services like Uber Eats. By subpoenaing Uber, investigators connected these gift cards to an address associated with Wilkins, who goes by the alias Sibel.eth online. Federal agents obtained a search warrant for Wilkins’ home, where they seized multiple electronic devices, including a MacBook laptop, smartphones, and digital wallets. During the seizure, Wilkins declined to engage with law enforcement, offering no statements or explanations. His legal representative did not respond to requests for comment following the arrest. Earlier this year, the FBI had already begun probing similar activities, announcing an investigation into a hacker believed to be operating a similar scheme involving malware-infused Steam games. At the time, officials urged individuals who had downloaded the suspicious titles, particularly those listed in the recent criminal complaint, to come forward with information. Since then, Valve, the company behind Steam, has taken steps to remove several compromised games from its platform. Among these was PirateFi, which was discovered to contain harmful code despite appearing harmless to users. Valve has previously issued warnings about the risks posed by malicious content on its platform, emphasizing the need for user vigilance. The removal of these games followed reports from both internal audits and external security researchers. The incident highlights the growing threat of cybercriminals exploiting trusted gaming environments to execute sophisticated scams. As more cases emerge, experts warn that such tactics could become increasingly common unless stricter measures are implemented to detect and block malicious software before it reaches end-users.