FBI Busts 21-Year-Old Behind Crypto-Stealing Malware in Fake Steam Games

The FBI has arrested Zyaire Dontaevious Zamarion Wilkins, a 21-year-old from North Lauderdale, Florida, for allegedly infecting over 8,000 computers with crypto-stealing malware hidden inside fake Steam games. The scheme involved at least eight indie games that were initially submitted to Steam as clean builds, but later received malicious updates that injected an infostealer.

The infostealer harvested passwords, session tokens, and crypto wallet data without causing any noticeable lag or crashes. It's estimated that BlockBlasters alone enabled the theft of over $150,000 from 261-478 victims. Wilkins didn't write the code himself; he purchased a remote access Trojan for $10,000 under the dark-web handle 'Sibel.eth' and coordinated distribution with an unnamed primary developer.

The scheme collapsed when the conspirators converted stolen crypto into over 150 Bitrefill gift cards and spent most of it on Uber Eats orders. This consumer trail linked an Uber Eats account directly to Wilkins, whose on-chain activity showed roughly $382,000 in cryptocurrency flowing through his wallets.