The FBI has arrested a 21-year-old Florida resident accused of running a cybercrime operation that infected nearly 8,000 PCs with malware spread through video games.
According to a federal indictment and TechSpot reporting, the operation stole approximately $220,000 of cryptocurrency from approximately 80 wallets between May 2024 and February 2026.
The suspect has been identified in court documents as Zaire Dontavius Zamarion Wilkins. Many of the infected games mentioned in the FBI complaint were listed on Steam until earlier this year, though the storefront is not specified by name in the indictment. Wilkins and unnamed co-conspirators face multiple charges, including conspiracy to distribute malware.
Infected Steam Games and the Malware Behind Them
The FBI’s complaint names Blockblasters, Dashverse, Lunara and PirateFi among the infected titles. TechSpot reports that all four games were available on Steam until earlier this year, when the FBI announced its investigation and urged anyone who downloaded the malicious game to come forward.
According to forensic cryptocurrency researcher ZachXBT and malware repository vx-underground, Blockblasters alone are estimated to have stolen approximately $150,000 in cryptocurrency from 261 to 478 victims.
This amount includes $32,000 stolen from Twitch streamer RastalandTV in September 2025. The streamer received these funds as donations from viewers to help with the costs of cancer treatment.
The FBI says the malware was designed to extract passwords and other sensitive data from victims’ computers, which was then used to drain online cryptocurrency wallets.
Investigators allege that Wilkins and associates promoted the infected game on platforms including Discord, Telegram, X and LinkedIn. According to the complaint, they used bots to find users with large cryptocurrency holdings and contacted them directly. The FBI believes Wilkins financed the operation and marketed the malware to other cybercriminals on underground forums.
TechSpot reports Signal chats recovered from the suspected malware developer’s devices link Wilkins to the operation. Miami news station WPLG Local 10 reports that the messages show that Wilkins, operating under the dark web alias Sibel.eth, purchased a $10,000 remote access trojan and discussed ways to trick victims into approving fraudulent cryptocurrency transactions. The suspected developer has not been publicly identified or formally charged.
How the FBI tracked suspects and how to protect your PC and wallet
The FBI reports that it has traced the stolen Bitcoin to more than 150 Bitterfill gift cards. TechSpot notes that these gift cards were mostly used to pay for Uber Eats orders. This gift card trail played a key role in identifying the suspects and linking blockchain activity to real-world purchases.
Investigators also searched the suspected malware developer’s property for additional evidence.
Users who have downloaded BlockBlasters, Dashverse, Lunara, or PirateFi on any platform may find their systems compromised. The malware captured credentials, including browser sessions and credentials associated with cryptocurrency wallets. Any accounts accessed on the affected machine during the exposure window may now be at risk.
Recommended actions based on the behavior of the malware include:-
- Disconnect the affected PC from the Internet before using it further.
- Transfer any cryptocurrencies to the new wallet created on a clean, secure device, and treat the existing seed phrases stored on the compromised PC as invalid.
- Change passwords for email, Exchange, and Wallet accounts from a trusted device, and enable hardware key or app-based two-factor authentication where available.
- Run a full offline scan with reputable anti-malware software, and if any credential-stealing components are found, perform a clean reinstall of the operating system.
- Review browser session tokens and cancel active sessions on exchanges, wallet services, and email accounts.
- If a loss has occurred, report the incident to the FBI’s Internet Crime Complaint Center at ic3.gov, including wallet addresses and transaction hashes.
The FBI has asked anyone who downloaded the infected titles to contact investigators to assist in the ongoing investigation.
Where the case stands remains unknown
Wilkins has been charged but not yet convicted, and the indictment mentions co-conspirators who have not been publicly named. The FBI has not said whether additional arrests are planned or whether the full list of affected titles in addition to the four named games will be disclosed.
TechSpot notes that the indictment does not specify which storefront hosted the games, and Valve has not yet made any public statements regarding the four titles mentioned by the FBI.
Thanks for being a Ghax reader. The post FBI arrests Florida man accused of distributing malware through Steam games in $220,000 crypto theft appeared first on GHacks.
