The FBI is asking potential victims to come forward after a malware campaign spread through eight games on Steam infected roughly 8,000 devices, gained unauthorized access to about 80 crypto wallets, and stole at least $500,000. On July 14, federal agents arrested 21-year-old Zyaire Dontaevious Zamarion Wilkins, accusing him of financing and procuring the malware and helping market the infected games. The complaint, which describes Steam as a 'popular digital distribution software company,' alleges the scheme ran from May 2024 through February 2026.
How the scheme worked
The group promoted the games on Discord, Telegram, X, and LinkedIn. Bots identified people with large crypto holdings and sent targeted messages encouraging them to download. Once installed, the malware captured private data and credentials. The group also discussed tricking victims into authorizing transactions that emptied wallets. One of the games, PirateFi, was available on Steam from Feb. 6 to Feb. 12, 2025, and contained the Vidar infostealer. Valve's review documentation says approved games can later be updated without another review — a potential loophole that allowed malware to bypass initial checks.
Following the money
Investigators followed Bitcoin payments from a scheme-linked wallet to Bitrefill, an online service used to buy digital gift cards, mostly for Uber Eats. A subpoena to Uber connected those gift cards to an account with deliveries to addresses associated with Wilkins. Blockchain transparency allowed tracing of funds to an identity-linked service, tying the stolen crypto to real-world purchases.
The games and the suspect
The eight games listed in the complaint are BlockBlasters, Chemia, Dashverse, DashFPS, Lampy, Lunara, PirateFi, and Tokenova. Wilkins is presumed innocent unless convicted. The FBI is now seeking potential victims of these games to help build the case. The agency has not said whether additional arrests are expected.
What victims should do
The FBI has set up a portal for anyone who downloaded these games or suspects their crypto was stolen. The investigation is ongoing, and the agency is urging affected users to report losses. For now, the case highlights how even trusted platforms like Steam can be exploited when approved games are later updated with malicious code — a vulnerability Valve's own documentation acknowledges.
