A cheap platformer on Steam quietly emptied players' crypto wallets, and the FBI says it tracked down a suspect because of his takeout habit. The FBI says a 21-year-old in Florida, Zyaire Wilkins, helped run a batch of Steam games that were secretly malware, draining $220,000 from players' wallets.
At a glance the games looked normal. BlockBlasters, a simple 2D platformer, hit Steam in late July 2025 with a wave of good reviews. About a month later, an update turned it into a wallet drainer. The operation hit roughly 8,000 computers and broke into about 80 crypto wallets, prosecutors say.
How the game drained wallets
Once someone installed the poisoned update, a hidden script checked which antivirus was running. It then added the malware's own folder to the list of files Windows Defender ignores, so scans skipped it. From there it grabbed saved passwords, Steam logins, and crypto wallet data, and shipped it all to the attackers.
Players saw a working game the whole time. The theft ran in the background, and by the time anyone noticed, the money was gone.
A cancer fundraiser robbed live
The most visible victim was raising money for his own cancer treatment when it happened. Raivo Plavnieks, a Latvian streamer known online as RastalandTV, was live and collecting donations for an aggressive cancer when he tried BlockBlasters on stream. Soon after he installed it, about $32,000 drained out of his crypto wallet. Crypto influencer Alex Becker said he sent Plavnieks $32,500 to cover the loss.
How takeout led the FBI to him
Investigators followed the money, and it went to dinner. The FBI says the wallet holding the stolen crypto bought more than 150 gift cards, and many of them paid for Uber Eats orders. Those deliveries went to addresses tied to Wilkins, including his University of West Florida address and his home in North Lauderdale, Florida. Signal chats pulled from a co-conspirator's devices linked Wilkins to the group under the handle "Sibel.eth."
Wilkins was arrested in mid-July 2026 and charged with conspiracy to obtain information by computer for private financial gain, a hacking-for-profit charge that carries up to 10 years. The complaint counts eight poisoned games over almost two years. It also points to an unnamed "primary developer" who built the malware but never names him.
