U.S. prosecutors have charged a Florida man with uploading fake video games containing malware to the popular PC gaming platform Steam. Once victims download and install the game, the malware is designed to infect their computers, steal passwords and other data, and drain cryptocurrency wallets, according to a criminal complaint.
On Tuesday, the FBI arrested Zyaire Wilkins, a 21-year-old Florida resident and student. On Wednesday, prosecutors charged him and several unnamed co-conspirators in the hacking crime. Over the past two years, Wilkins and his partners have reportedly posted several video games containing malware to Steam, including BlockBlasters, Dashverse, Lampy, Lunara, and PirateFi. According to the FBI, Wilkins and his co-conspirators used the malware to infect approximately 8,000 victims and hacked approximately 80 cryptocurrency wallets, stealing at least $220,000 worth of cryptocurrency.
According to authorities, Wilkins and others marketed malicious video games on Discord, LinkedIn, and Telegram.
Wilkins’ attorney did not respond to a request for comment.
Last March, the FBI announced it was investigating hackers suspected of hacking victims using video games containing malware posted on Steam. In the announcement, the bureau urged people who downloaded malicious games, including those mentioned in this week’s complaint, to come forward and provide evidence to help the investigation.
Last year, Steam maker Valve removed several video games from its platform after they were found to contain malware, including PirateFi. All of the games were designed to appear legitimate enough for players to install and play, but they all contained malicious code.
After the FBI identified others involved in the crime, federal agents interviewed them, according to the complaint. The anonymous person said he worked with others to raise money to launch and market the malicious game in exchange for sharing some of the stolen cryptocurrency. After identifying specific cryptocurrency accounts involved in the scheme, the FBI tracked cryptocurrency payments made to those accounts to purchase several gift cards, including UberEats. According to the complaint, after subpoenaing Uber, the feds were able to determine that the gift cards were linked to an account providing deliveries to Wilkins, who went by the nickname Sibel.eth online.
Federal authorities later obtained a search warrant for Wilkins’ home and seized his MacBook laptop, cell phone, other devices, and digital wallet. He refused to comment or answer any questions, according to the complaint.
If you purchase through links in our articles, we may receive a small commission. This does not affect our editorial independence.
