Florida Student Arrested After Infecting 8,000 PCs Through Fake Steam Games

Federal investigators have arrested a Florida-based student in connection with a sophisticated malware campaign that leveraged Steam's free-to-play ecosystem to steal cryptocurrency from unsuspecting gamers. Zyaire Dontaevious Zamarion Wilkins was taken into custody on July 14th, following a months-long investigation that the FBI publicly announced back in March of this year. The alleged scheme resulted in more than $220,000 in stolen cryptocurrency and infected approximately 8,000 personal computers across a roughly two-year period.

The malware was distributed through a handful of seemingly legitimate free games published to Steam, including PirateFi, Dashverse, Lampy, Lunara, and BlockBlasters. All five titles have since been removed from the platform. Wilkins and his alleged collaborators are said to have promoted these games aggressively across social platforms including Discord, LinkedIn, and Telegram — channels where gaming communities are active and where unsolicited recommendations can still carry social credibility. The multi-platform marketing push helped the scheme reach a surprisingly wide audience before detection.

One of the more harrowing details buried in this story involves streamer RastalandTV, who was playing BlockBlasters last September specifically to raise money for his own cancer treatment. He reportedly lost $32,000 to the embedded malware during those streams — a detail that throws the human cost of this kind of cybercrime into sharp relief. The criminal complaint, shared publicly by TechCrunch and Techspot, outlines how the FBI methodically traced the operation back to Wilkins.

Investigators initially identified Wilkins after interviewing an unnamed co-conspirator in the scheme. They then located a cryptocurrency account holding stolen funds, which had been used to purchase Uber gift cards. A subpoena served to Uber allowed agents to connect those cards to an account associated with deliveries made to Wilkins' home address. His online identity, operating under handles including 'Sibel.eth,' provided additional links in the evidentiary chain.

Following those leads, investigators obtained a search warrant for Wilkins' residence and confiscated his laptop, mobile phone, and login credentials for multiple digital wallets. No comment has been issued by Wilkins or any attorney representing him as of this writing. Valve has not made a public statement addressing how the malicious titles cleared its review processes or what additional safeguards, if any, it plans to introduce as a result.