A years-long scheme to hide crypto-stealing malware in Steam games has ended in handcuffs — and one of the most self-defeating paper trails in recent cybercrime memory. The FBI has arrested a 21-year-old Florida man accused of infecting roughly 8,000 computers and draining at least $200,000 in cryptocurrency, only to spend the proceeds on gift cards that led investigators right back to him.
The Scheme: Fake Games, Real Damage
According to investigators, Zyaire Wilkins and associates spent about two years publishing several malware-laden titles on Steam, listed under names including BlockBlasters, Dashverse, Lampy, Lunara, and PirateFi. The games worked as bait: once installed, the hidden malware compromised victims’ machines and opened a door to their crypto wallets. Authorities say roughly 80 wallets were hacked, netting at least $200,000. It’s a stark reminder that a storefront’s trust can be weaponized — even a platform as established as Steam isn’t immune to bad actors slipping through the cracks.
Caught by an Uber Eats Trail
The undoing was almost comic. The FBI identified a crypto account tied to the scheme, then followed the money as it was converted into more than 150 gift cards — most of them spent on Uber Eats. A subpoena to Uber connected one of those gift-card accounts to food deliveries made to Wilkins, who allegedly operated online under the handle “Sibel.eth.” Stolen Bitcoin, it turns out, is far more traceable than criminals tend to assume, and turning it into dinner orders left what amounted to a signed receipt.
Why This Matters Beyond One Arrest
For the wider gaming and tech world, the case is a flashing warning light. Digital storefronts increasingly host third-party and early-access content, and every one of those uploads is a potential vector. Players who assume “if it’s on Steam, it’s safe” are exactly the target. The episode echoes other recent scares — including malware smuggled through Project Zomboid mods — and underscores why platform vetting, wallet hygiene, and basic skepticism matter more than ever as crypto and gaming keep converging.
A Lesson in Traceability
If there’s a takeaway for aspiring cybercriminals, it’s an unflattering one: the blockchain remembers, and gift cards have names attached. For everyone else, the case is a prompt to treat unfamiliar downloads — even on trusted platforms — with the caution they deserve. The FBI closed this one by following a trail of takeout. The next scheme may not be so conveniently hungry.