Arrest Follows Two-Year Investigation

The FBI has arrested Zyaire Dontaevious Zamarion Wilkins, a 21-year-old resident of Florida, in connection with an alleged cybercrime operation that targeted cryptocurrency users through video games distributed on Steam.

According to court documents, the scheme ran from May 2024 to February 2026 and involved embedding information-stealing malware into at least eight games. These titles were made available for download on the popular gaming platform before being removed earlier this year.

How the Malware Operation Worked

Investigators allege that Wilkins and unnamed co-conspirators created Steam developer accounts using stolen U.S. citizen identities. The infected games included titles such as BlockBlasters, Lunara, PirateFi, Lampy, and Dashverse.

Once installed on victims' computers, the malware harvested login credentials, browser cookies, authentication tokens, and autofill data. This information was then used to access and drain approximately 80 cryptocurrency wallets, resulting in losses exceeding $220,000. The operation reportedly infected around 8,000 PCs.

Tracing the Proceeds

FBI investigators linked the stolen funds through cryptocurrency transactions to purchases on Bitrefill, a platform for buying gift cards with digital assets. Records show more than 150 gift cards were acquired, many for Uber Eats.

The case gained earlier attention in the gaming community when crypto investigator ZachXBT highlighted risks from malicious Steam titles, noting over $150,000 in reported thefts at the time.

Notable Victim and Platform Impact

One documented victim was Twitch streamer RastalandTV, who lost $32,000 in September 2025 while fundraising for cancer treatment costs. The FBI publicly sought information from potential victims in March 2026 as part of its investigation.

The scheme underscores vulnerabilities in digital distribution platforms where smaller developers can publish content rapidly, sometimes using tools like generative AI to create games quickly.

Wilkins faces federal charges, though the allegations have not been proven in court. The investigation involved tracing email accounts, device data, and transaction records that connected back to the suspect.