Federal prosecutors have charged a 21-year-old man from Florida over an alleged cybercrime scheme that hid cryptocurrency-stealing malware inside games shared through Steam.
According to a federal criminal complaint, Zyaire Wilkins, from North Lauderdale, Florida, worked with several unnamed partners to publish infected games over almost two years.
Investigators said the games looked safe and worked as expected. Behind the scenes, they secretly installed malware on players’ computers.
The FBI believes the malware stole passwords, browser information, private files, and cryptocurrency wallet details from victims. Authorities said the campaign spread through several game titles.
Those titles included BlockBlasters, Dashverse, Lampy, Lunara, PirateFi, Chemia, DashFPS, and Tokenova. The FBI estimates the campaign infected about 8,000 computers. Investigators also believe it compromised around 80 cryptocurrency wallets.
According to the complaint, the operation stole at least $220,000 worth of cryptocurrency. Investigators also said the group promoted the games through Discord, LinkedIn, and Telegram to reach more players.
The complaint states that the operation ran from May 2024 until early 2026. Law enforcement later identified the infected games and began tracking the people behind them.
Investigators tracked payments back to the suspect
Investigators did more than study the malware itself. They also followed cryptocurrency transactions and other digital records. According to court documents, investigators traced cryptocurrency linked to the operation through purchases made on the gift card service Bitrefill. The records showed more than 150 gift card purchases. Among them were Uber Eats gift cards.
The FBI’s investigative techniques are also being used in other high-profile cases, including a possible hack of its own surveillance systems.
According to investigators, those gift cards paid for food deliveries sent to Wilkins’ home. Federal agents later carried out a search warrant at the residence. They seized electronic devices and cryptocurrency wallets for forensic testing. Investigators also found cryptocurrency wallet recovery phrases inside the home. According to court records, one recovery phrase belonged to a Monero wallet.
Monero is known for protecting users’ privacy. Its transactions are usually harder to trace than those made with public cryptocurrencies like Bitcoin. Court filings also suggest Wilkins did not create the malware himself. Instead, investigators believe he helped pay for and promote the operation.
Authorities think another suspect may have written the malware used in the campaign. Federal agents arrested Wilkins earlier this week. If a court finds him guilty, he could face up to 10 years in federal prison. His lawyer has not made any public statement about the allegations.
Hidden malware inside games continues to raise security concerns
This case shows that criminals continue finding new ways to spread malware through trusted gaming platforms. Many people believe games downloaded from well-known stores are safe. That trust can make it easier for criminals to reach more victims. Once the malware gets installed, it can quietly collect sensitive information.
According to investigators, it can steal saved passwords, browser cookies, login details, cryptocurrency wallet data, and other private files. Many victims may not notice anything wrong at first. Some people only discover the problem after losing money or finding unusual activity in their accounts.
The FBI has asked anyone who downloaded the affected games between May 2024 and January 2026 to contact investigators. Authorities continue working to identify more victims and measure the full size of the alleged operation.
Cryptocurrency records helped build the case
The investigation also shows that cryptocurrency transactions can still help law enforcement. Although many people believe cryptocurrency hides identities, investigators can still connect digital payments with real-world purchases.
According to investigators, blockchain records, digital evidence, and everyday purchases helped them identify the alleged suspect. The case also highlights how different pieces of evidence can fit together during an investigation.
A cryptocurrency payment can lead to a gift card purchase. A gift card purchase can lead to a delivery address. That address can help investigators connect online activity to a real person.
The investigation remains ongoing as authorities continue examining the seized devices and cryptocurrency wallets. For now, the criminal complaint contains allegations only. A court will decide whether the government has proven its case.
The FBI continues asking anyone who downloaded the listed Steam games during the affected period to come forward as investigators work to identify additional victims and learn more about the alleged malware campaign.
