{"id":372886,"date":"2026-07-21T12:36:00","date_gmt":"2026-07-21T19:36:00","guid":{"rendered":"https:\/\/cms-articles.softonic.io\/en\/?p=372886"},"modified":"2026-07-21T12:38:06","modified_gmt":"2026-07-21T19:38:06","slug":"steam-malware-case-fbi-arrests-21-year-old-over-alleged-220000-crypto-theft","status":"publish","type":"post","link":"https:\/\/cms-articles.softonic.io\/en\/steam-malware-case-fbi-arrests-21-year-old-over-alleged-220000-crypto-theft\/","title":{"rendered":"Steam malware case: FBI arrests 21-year-old over alleged $220,000 crypto theft"},"content":{"rendered":"

The FBI says it has arrested Zyaire Dontaevious Zamarion Wilkins, a 21-year-old from Florida<\/strong>, and accuses him of helping run a malware operation on Steam<\/a>, Valve’s PC game storefront<\/a>. Investigators say the scheme ran from May 2024 through February 2026 and siphoned cryptocurrency from players.<\/p>\n

\r\n
\r\n
\r\n
\r\n \"Steam\"\r\n <\/div>\r\n
\r\n Steam<\/span>\r\n Download<\/a>\r\n <\/div>\r\n
\r\n <\/path><\/path><\/text><\/svg>\r\n <\/div>\r\n <\/div>\r\n
\r\n <\/span>\r\n <\/div>\r\n
\r\n \r\n <\/div>\r\n <\/a>\r\n <\/div>\r\n<\/div>\n\n\n\n

According to investigators, the operation lasted from May 2024 to February 2026, infected about 8,000 devices<\/strong>, compromised roughly 80 wallets, and brought in at least $220,000 in crypto. Wilkins now faces a federal conspiracy charge tied, prosecutors say, to obtaining computer information for private financial gain, an offense that can carry a sentence of up to 10 years.<\/p>\n\n

Prosecutors say at least eight indie games, including Lunara, PirateFi, BlockBlasters, Lampy, and Dashverse, contained infostealer-style malware<\/strong> built to grab passwords, login credentials, and wallet data. They also allege that some of those titles made it through Steam’s review process first, and that the malicious code showed up later in post-release updates.<\/p>\n\n

If you play smaller indie games on Steam, or you install updates after release without thinking much about them, this is the sort of case to watch closely. Investigators say the games were promoted on Discord<\/a>, Telegram<\/a>, and X<\/strong>, with bots used to target people believed to be holding large amounts of crypto.<\/p>\n\n

The FBI first warned players in March 2026. Agents say they tracked stolen Bitcoin<\/strong>, that had been converted into more than 150 gift cards, many of which were then used for Uber Eats deliveries sent to addresses linked to Wilkins, with help from a cooperating co-conspirator in Seattle.<\/p>\n\n

The affected games were sold on Steam for PC, and several of them were removed earlier in 2026. Wilkins was due in federal court in Fort Lauderdale, and the FBI says the investigation is still ongoing.<\/p>\n

\r\n
\r\n
\r\n
\r\n \"Malwarebytes\r\n <\/div>\r\n
\r\n Malwarebytes Anti-Malware<\/span>\r\n Download<\/a>\r\n <\/div>\r\n
\r\n <\/path><\/path><\/text><\/svg>\r\n <\/div>\r\n <\/div>\r\n
\r\n <\/span>\r\n <\/div>\r\n
\r\n \r\n <\/div>\r\n <\/a>\r\n <\/div>\r\n<\/div>\n\n","protected":false},"excerpt":{"rendered":"

The FBI says it has arrested Zyaire Dontaevious Zamarion Wilkins, a 21-year-old from Florida, and accuses him of helping run a malware operation on Steam, Valve’s PC game storefront. Investigators say the scheme ran from May 2024 through February 2026 and siphoned cryptocurrency from players. According to investigators, the operation lasted from May 2024 to … Continue reading “Steam malware case: FBI arrests 21-year-old over alleged $220,000 crypto theft”<\/span><\/a><\/p>\n","protected":false},"author":9327,"featured_media":372885,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":"","wpcf-pageviews":0},"categories":[1015],"tags":[],"usertag":[],"vertical":[],"content-category":[],"class_list":["post-372886","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-news"],"aioseo_notices":[],"_links":{"self":[{"href":"https:\/\/cms-articles.softonic.io\/en\/wp-json\/wp\/v2\/posts\/372886","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/cms-articles.softonic.io\/en\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/cms-articles.softonic.io\/en\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/cms-articles.softonic.io\/en\/wp-json\/wp\/v2\/users\/9327"}],"replies":[{"embeddable":true,"href":"https:\/\/cms-articles.softonic.io\/en\/wp-json\/wp\/v2\/comments?post=372886"}],"version-history":[{"count":1,"href":"https:\/\/cms-articles.softonic.io\/en\/wp-json\/wp\/v2\/posts\/372886\/revisions"}],"predecessor-version":[{"id":372887,"href":"https:\/\/cms-articles.softonic.io\/en\/wp-json\/wp\/v2\/posts\/372886\/revisions\/372887"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/cms-articles.softonic.io\/en\/wp-json\/wp\/v2\/media\/372885"}],"wp:attachment":[{"href":"https:\/\/cms-articles.softonic.io\/en\/wp-json\/wp\/v2\/media?parent=372886"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/cms-articles.softonic.io\/en\/wp-json\/wp\/v2\/categories?post=372886"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/cms-articles.softonic.io\/en\/wp-json\/wp\/v2\/tags?post=372886"},{"taxonomy":"usertag","embeddable":true,"href":"https:\/\/cms-articles.softonic.io\/en\/wp-json\/wp\/v2\/usertag?post=372886"},{"taxonomy":"vertical","embeddable":true,"href":"https:\/\/cms-articles.softonic.io\/en\/wp-json\/wp\/v2\/vertical?post=372886"},{"taxonomy":"content-category","embeddable":true,"href":"https:\/\/cms-articles.softonic.io\/en\/wp-json\/wp\/v2\/content-category?post=372886"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}