A 21-year-old from North Lauderdale, Florida, now sits in federal custody after allegedly orchestrating a two-year campaign that turned eight Steam titles into crypto drains. Zyaire Dontaevious Zamarion Wilkins, aka Sibel.eth on Signal, is accused of financing and marketing malware-laced games that infected roughly 8,000 devices and drained at least $220,000 from 80 wallets between May 2024 and February 2026.

The titles—BlockBlasters, Chemia, Dashverse/DashFPS, Lampy, Lunara, PirateFi, and Tokenova—looked like legitimate indie drops but carried info-stealing payloads that scraped passwords and wallet data. Prosecutors say the crew pushed them hard on Discord, Telegram, X, and LinkedIn, even deploying bots to target users with large crypto holdings. One particularly grim hit: BlockBlasters allegedly siphoned $32,000 from a stage-4 cancer streamer during a live fundraiser, money that vanished while viewers watched.

Wilkins was unmasked the old-fashioned way. Investigators traced stolen Bitcoin to over 150 Bitrefill gift cards, mostly Uber Eats orders delivered to his addresses and university housing. A search warrant turned up devices, seed phrases including a Monero wallet, and chats showing he paid $10,000 for a remote access trojan. Charged with conspiracy to obtain information by computer for private financial gain, he faces up to ten years. The FBI’s Seattle office is still taking victim reports via their Steam Malware form.

Valve has pulled several of the titles already, but the damage lingers for anyone who clicked the wrong free-to-play listing. The receipts don’t lie: sloppy operational security beat sophisticated malware every time.