The FBI arrested Zyarie Wilkins, a 21-year-old from North Lauderdale, Florida, for allegedly financing a scheme that embedded crypto-stealing malware inside eight video games distributed through Valve's Steam platform. Prosecutors say the operation infected approximately 8,000 devices and drained at least $220,000 in cryptocurrency from roughly 80 wallets between May 2024 and February 2026. The case highlights a vulnerability in how digital distribution platforms vet software updates after initial approval, as the malicious payload was introduced through post-launch updates that bypassed Steam's review process.
Malware Operated Through Post-Launch Game Updates
The infected titles included BlockBlasters, Dashverse, Lunara, PirateFi, Chemia, Lampy, DashFPS, and Tokenova. All eight passed Steam's initial review process and appeared legitimate at launch. The malicious payload was introduced later through post-launch updates, a sequence that bypasses the platform's first review entirely. Steam removed all eight games in early 2026.
The malware functioned as an infostealer. During gameplay, it silently harvested stored passwords, active session tokens, and cryptocurrency wallet credentials. The operation actively targeted high-value victims. According to the federal complaint, bots identified wallets with large balances and sent direct messages on Discord, Telegram, X, and LinkedIn, directing targets to the infected downloads.
Uber Eats Gift Card Purchases Led to Suspect Identification
Investigators traced stolen Bitcoin from the scheme's wallet to more than 150 gift cards purchased through Bitrefill, a gift card service. Most of the cards were spent on Uber Eats orders. A subpoena to Uber linked those gift cards to an account with deliveries to Wilkins' family home and his addresses at the University of West Florida, according to the complaint reported by WPLG Local 10.
Wilkins, who used the alias "Sibel.eth" online, did not build the malware himself. Prosecutors say he paid $10,000 for a remote access Trojan and worked with a lead developer who has not been charged. Federal agents searched Wilkins' residence and seized a MacBook, cellphones, and three cryptocurrency wallet seed phrases, including one for a Monero wallet. His transaction history showed approximately $382,000 in cryptocurrency flowing through his wallets, the complaint stated.
Wilkins Faces Federal Conspiracy Charges in Seattle Court
The arrest is the first charge linked to the FBI's broader investigation into malicious Steam titles, which the agency's Seattle field office disclosed in March 2026 when it began seeking victims. BlockBlasters alone netted more than $150,000 from between 261 and 478 victims, according to blockchain researcher ZachXBT and the malware repository vx-underground. One victim, Twitch streamer RastalandTV, lost approximately $32,000 in September 2025, funds that viewers had donated for cancer treatment.
Wilkins is charged with conspiracy to obtain information by computer for private financial gain, which carries a maximum sentence of 10 years. His court appearance took place on July 15. Co-conspirators remain unnamed in the complaint, and the investigation is ongoing. The case is being prosecuted in Seattle, near the Bellevue, Washington headquarters of Steam owner Valve. Valve has not issued a public statement on the matter, and the FBI continues to seek additional victims through its Seattle field office.
FAQ
How did the FBI identify Zyarie Wilkins as the suspect in the Steam malware scheme?
Investigators traced stolen Bitcoin to more than 150 gift cards purchased through Bitrefill, most of which were spent on Uber Eats orders. A subpoena to Uber linked those gift cards to an account with deliveries to Wilkins' family home and his addresses at the University of West Florida, according to the federal complaint reported by WPLG Local 10.
What charges does Zyarie Wilkins face for the cryptocurrency theft operation?
Wilkins is charged with conspiracy to obtain information by computer for private financial gain, which carries a maximum sentence of 10 years. His court appearance took place on July 15, and the case is being prosecuted in Seattle near Valve's headquarters.
