Florida Man Arrested for Allegedly Stealing $220K in Crypto via Steam Malware Games

Federal authorities arrested 21-year-old Zyaire Dontaevious Zamarion Wilkins of North Lauderdale, Florida on July 14, charging him with conspiracy to obtain information by computer for private financial gain. Investigators say he and unnamed co-conspirators embedded crypto-stealing malware into Steam games to drain victims' wallets, walking away with at least $220,000.

The games allegedly used as delivery vehicles — BlockBlasters, Dashverse, Lunara, and PirateFi — appeared on Steam over the past couple of years. Marketed through Discord, LinkedIn, Telegram, and X, these titles infected roughly 8,000 devices between May 2024 and February 2026. The malware harvested login credentials and private data, giving the group access to victims' crypto wallets. Wilkins reportedly bought a remote access trojan for $10,000 that could instantly empty wallets, then used the stolen funds to purchase 150 gift cards — primarily for Uber Eats. Investigators tracked him through his "Sibel.eth" handle, which he used on Signal to coordinate "draining campaigns" with an unidentified primary developer. A subpoena to Uber tied those gift cards to an account delivering to both his home and his University of West Florida addresses. A review of his crypto history showed roughly $382,000 moving in and out of his accounts.

Crypto-draining malware distributed through gaming platforms has become an increasingly documented threat vector, with Steam's open publishing model historically making it easier for bad actors to slip malicious titles onto the storefront before they're caught and removed. Cases like this have pushed Valve to tighten review processes, though the platform still sees occasional malware-laced games slip through.

Wilkins was scheduled to appear in federal court in Fort Lauderdale on July 15. It's unclear when he'll be transferred to Washington to face the charge, but a conviction carries a maximum sentence of up to 10 years in prison.