The FBI has arrested Zyaire Wilkins, a 21-year-old from North Lauderdale, Florida, for allegedly funding a scheme that spread crypto-stealing malware through eight games on Valve's Steam platform. According to federal prosecutors, the operation infected roughly 8,000 devices and drained at least $220,000 in cryptocurrency from about 80 wallets between May 2024 and February 2026. The compromised titles—BlockBlasters, Dashverse, Lunara, PirateFi, Chemia, Lampy, DashFPS, and Tokenova—all passed Steam’s initial review cleanly and only turned malicious through post-launch updates, a tactic that bypassed the platform’s first inspection entirely. Steam removed all eight games in early 2026 after the malware was discovered.
The malware functioned as an infostealer, silently harvesting saved passwords, session tokens, and cryptocurrency wallet credentials while victims played. The attackers did not rely on random infections; bots scanned for wallets with large balances and then sent direct messages on Discord, Telegram, X, and LinkedIn to lure targets to the infected downloads. In one notorious case, Twitch streamer RastalandTV lost roughly $32,000 in September 2025—money donated by viewers for cancer treatment.
The conspiracy unraveled when investigators traced stolen Bitcoin to more than 150 Bitrefill gift cards, most of which were used for Uber Eats orders. A subpoena to Uber linked those gift cards to an account delivering to Wilkins’ family home and his university addresses. Wilkins, who operated under the alias “Sibel.eth,” had paid $10,000 for a remote access Trojan and worked with an as-yet-unnamed lead developer. A search of his residence turned up a MacBook, cellphones, and seed phrases for three crypto wallets, including a Monero wallet. His transaction records showed roughly $382,000 in cryptocurrency flowing through his wallets. Wilkins is charged with conspiracy to obtain information by computer for private financial gain, carrying a maximum of 10 years in prison. His court appearance took place on July 15. The FBI continues to seek additional victims through its Seattle field office, and Valve has not issued a public statement.
