Crypto malware in 8 Steam games steals tokens after leaving trail to Uber Eats deliveries
The FBI is seeking potential victims of a Steam malware campaign tied to eight games: BlockBlasters, Chemia, Dashverse, DashFPS, Lampy, Lunara, PirateFi, and Tokenova. Investigators allege the campaign infected about 8,000 devices, accessed roughly 80 crypto wallets, and stole at least $220,000. A federal complaint reported by Local 10 says 21-year-old Zyaire Dontaevious Zamarion Wilkins was arrested and accused of financing, procuring, and helping market the malware. The games were allegedly promoted through Discord, Telegram, X, and LinkedIn, with bots targeting people holding large crypto balances. Once installed, the malware reportedly stole credentials and private data and may have been used to trick victims into authorizing wallet-draining transactions. PirateFi is specifically linked to Vidar infostealer in a prior cyber advisory. The case shows that trusted game downloads can expose wallet secrets before a wallet is ever opened, and that on-chain tracing may still preserve evidence through later payment trails.
