FBI Arrests Florida Man Accused of Using Fake Steam Games to Steal Cryptocurrency

U.S. federal prosecutors have charged a 21-year-old Florida man with allegedly publishing malware-infected video games on Steam that were used to steal cryptocurrency from unsuspecting players. According to a criminal complaint, the malicious software was designed to infect victims’ computers after the games were installed, allowing attackers to steal passwords, sensitive information and access to cryptocurrency wallets.

The FBI arrested Zyaire Wilkins on Tuesday, accusing him and several unnamed co-conspirators of operating the scheme over the past two years. Investigators allege the group uploaded multiple malware-laced titles to Valve’s Steam gaming platform, including BlockBlasters, Dashverse, Lampy, Lunara and PirateFi. Authorities say the campaign infected roughly 8,000 computers and compromised around 80 cryptocurrency wallets, resulting in the theft of at least $220,000 in digital assets.

According to prosecutors, the group promoted the games through online communities on Discord, LinkedIn and Telegram to attract players and increase downloads. Although the titles appeared to be legitimate games, they secretly contained malware that could harvest login credentials and other sensitive information once installed.

The investigation follows an FBI warning issued in March, when the agency announced it was looking into malware hidden inside games distributed through Steam. At the time, investigators asked anyone who had downloaded the affected titles to come forward and provide evidence that could assist the investigation. Valve has since removed several of the identified games from the platform, including PirateFi, after they were found to contain malicious software.

Investigators said the case progressed after identifying another individual allegedly involved in the operation. During interviews with federal agents, the unnamed person reportedly admitted to helping raise money to develop and market the fake games in exchange for a share of the stolen cryptocurrency. The information helped investigators identify a cryptocurrency wallet linked to the operation.

Federal authorities then traced transactions from that wallet, including purchases of several gift cards such as Uber Eats vouchers. After obtaining records from Uber through a subpoena, investigators determined that the gift cards were connected to an account that had placed food delivery orders to Wilkins’ residence. According to the complaint, Wilkins used the online nickname “Sibel.eth”.

Armed with that evidence, the FBI obtained a search warrant for Wilkins’ home. During the search, agents seized a MacBook laptop, mobile phones, digital wallets and other electronic devices believed to be connected to the alleged hacking operation. According to court documents, Wilkins declined to answer investigators’ questions following the search.

The case highlights the growing threat posed by malware disguised as legitimate software, particularly within gaming platforms where users often download titles from trusted marketplaces. Investigators continue to examine the alleged operation and have indicated that additional individuals connected to the scheme remain under investigation.