A Florida man is accused of hiding crypto-stealing malware in Steam games. Here’s how the alleged scam worked

The case highlights a growing threat for gamers and crypto investors alike: malware hidden inside seemingly harmless software that can quietly search a computer for passwords, wallet credentials and other sensitive financial information.

How the alleged Steam malware scheme worked

Prosecutors allege Zyaire Wilkins, 21, worked with co-conspirators to develop and promote at least eight malware-infected games between May 2024 and February 2026. The titles named by the FBI include BlockBlasters, Chemia, Dashverse (also known as DashFPS), Lampy, Lunara, PirateFi and Tokenova.

The 15-page court complaint alleges the group promoted the games across Discord, Telegram, X and LinkedIn, encouraging users to download them. Once installed, prosecutors say the malware searched victims’ computers for sensitive information that could be used to access cryptocurrency wallets before draining digital assets.

Some of the games had already attracted attention before the arrest. Earlier this year, Valve removed several titles from Steam after reports that they contained malware. One game, BlockBlasters, was reportedly linked to more than $150,000 in stolen cryptocurrency, including funds belonging to a streamer who was raising money for cancer treatment.

Federal investigators say they identified Wilkins by tracing cryptocurrency transactions tied to an alleged co-conspirator. According to the complaint, investigators linked a crypto wallet to a Bitrefill account used to purchase more than 150 gift cards, including Uber Eats gift cards. Those purchases allegedly helped investigators identify a phone number and eventually an address connected to Wilkins.

Wilkins was arrested July 14 and charged with conspiracy to obtain information by computer for private financial gain. As with any criminal case, the allegations remain accusations, and Wilkins is presumed innocent unless proven guilty in court.

How to protect yourself from malware disguised as games

While this case focuses on cryptocurrency, many types of malware are designed to steal a much wider range of personal and financial information.