Florida Man Accused Of Hiding Crypto-Stealing Malware In Steam Games. Federal Agents Say Thousands Of Devices Were Infected.
Federal authorities have arrested a 21-year-old Florida man accused of participating in a scheme that allegedly used malware-infected video games to steal cryptocurrency from gamers, marking one of the largest publicly disclosed cybercrime investigations involving titles distributed through the ecosystem in recent years.
Court documents detailed that Zyaire Wilkins of Florida was arrested on July 14 and charged with conspiracy to obtain information by computer for private financial gain. Prosecutors allege Wilkins worked with co-conspirators between May 2024 and February 2026 to distribute malicious software through at least eight video games, resulting in more than $220,000 in stolen cryptocurrency.
The alleged operation targeted gamers by embedding malware inside downloadable titles, allowing attackers to collect private information and access victims’ cryptocurrency wallets. Federal investigators said approximately 8,000 devices were infected and around 80 crypto wallets were compromised during the course of the investigation, according to The Verge.
The games identified in court filings include BlockBlasters, Chemia, Dashverse, DashFPS, Lampy, Lunara, PirateFi and Tokenova. While the criminal complaint does not explicitly name Steam, several of the titles were previously removed from Valve’s gaming platform following reports of suspicious activity, according to local outlet Local 10 News.
The FBI previously sought information from potential victims as part of what it described as a “Steam malware investigation.” Public notices issued by the bureau included several of the same game titles referenced in the federal complaint.
Investigators allege Wilkins and others promoted the games across multiple online platforms, including Discord, Telegram, X and LinkedIn, encouraging users to download and install them. Once installed, authorities claim the malware collected sensitive information that was later used to drain cryptocurrency wallets.
Some of the games had already attracted attention before the arrest. In early 2025, gaming and cybersecurity publications reported that Valve removed PirateFi and BlockBlasters after users reported suspicious behavior. One victim allegedly lost more than $150,000 in cryptocurrency, including funds raised by a streamer undergoing cancer treatment, according to PC Gamer.
Federal agents said they connected Wilkins to the operation through blockchain analysis and digital payment records. According to the complaint, investigators identified a cryptocurrency wallet allegedly linked to Wilkins through communications with a co-conspirator. That wallet was subsequently traced to an account on Bitrefill, a platform that allows users to purchase gift cards using cryptocurrency.
Authorities allege the Bitrefill account was used to purchase more than 150 gift cards, including cards for Uber Eats. Those purchases ultimately helped investigators identify a phone number and physical address associated with Wilkins, according to The Verge.
The case highlights growing concerns around malware distributed through gaming platforms. Cybersecurity researchers have increasingly warned that threat actors are using video games, mods and unofficial downloads to target younger users and cryptocurrency holders. The FBI and the Cybersecurity and Infrastructure Security Agency have both issued advisories in recent years about malicious software embedded in online gaming communities and marketplaces.
The criminal complaint was filed in the U.S. District Court for the Western District of Washington, where Valve is headquartered. Valve did not immediately respond to requests for comment from multiple media outlets.
Wilkins remains charged with conspiracy to obtain information by computer for private financial gain. Court records reviewed by Local 10 News indicate that federal prosecutors have not publicly identified the alleged co-conspirators referenced in the complaint.
