Crypto malware distributed through Steam.
The FBI has arrested 21-year-old Zyaire Wilkins over an alleged operation that distributed malware through video games.
According to the criminal complaint, 8 infected games compromised roughly 8,000 devices, provided access to around 80 crypto wallets and resulted in at least $220,000 being stolen.
The games were reportedly promoted through Discord, Telegram, X and LinkedIn, while bots were used to identify people with significant crypto holdings and target them directly.
The titles looked like real games. They could be downloaded, installed and played.
Behind that apparently normal product, however, malware collected passwords, private information and credentials that could later be used to access victims’ wallets.
The FBI has specifically named BlockBlasters, Chemia, Dashverse, Lampy, Lunara, PirateFi and Tokenova in its Steam malware investigation.
Much of crypto security advice is still built around the idea that users only lose money by connecting to an obvious scam website, signing a malicious transaction or revealing a seed phrase in a Telegram DM.
That threat model is outdated.
Attackers can now spend months building functional software, manufacturing credibility and approaching selected holders through professional platforms before the victim even realises that crypto is involved.
