{"id":75934,"date":"2026-07-26T03:03:25","date_gmt":"2026-07-26T03:03:25","guid":{"rendered":"https:\/\/crowdfundjunction.com\/blog\/8000-devices-infected-80-crypto-wallets-accessed-by-video-game-malware\/"},"modified":"2026-07-26T03:03:25","modified_gmt":"2026-07-26T03:03:25","slug":"8000-devices-infected-80-crypto-wallets-accessed-by-video-game-malware","status":"publish","type":"post","link":"https:\/\/crowdfundjunction.com\/blog\/8000-devices-infected-80-crypto-wallets-accessed-by-video-game-malware\/","title":{"rendered":"8,000 Devices Infected, 80 Crypto Wallets Accessed by Video Game Malware"},"content":{"rendered":"<p><b>(Originally posted on : Bitcoin News )<\/b><br \/>\n<\/p>\n<div>\n<div class=\"@container mb-[25px] rounded-sm overflow-clip py-0.5 pr-0.5 pl-2.5 bg-success-100\">\n<div class=\"flex flex-col gap-m overflow-clip rounded-[6px] !bg-success-10 p-3 @[420px]:p-m\">\n<h2 class=\"m-0 flex items-center gap-s text-[19px] !text-[#1c1c1c] md:text-[20px]\"><svg xmlns=\"http:\/\/www.w3.org\/2000\/svg\" width=\"16\" height=\"10\" viewbox=\"0 0 16 10\" fill=\"none\" class=\"shrink-0 text-success-100\" aria-hidden=\"true\"><path d=\"M1 1.5h14\" stroke=\"currentColor\" stroke-width=\"2.5\" stroke-linecap=\"round\"\/><path d=\"M1 8.5h10\" stroke=\"currentColor\" stroke-width=\"2.5\" stroke-linecap=\"round\"\/><\/svg><span>Key Takeaways<\/span><\/h2>\n<ul class=\"m-0 flex list-none flex-col gap-m pl-0\">\n<li class=\"m-0 flex items-start gap-s !text-[#434248]\"><span class=\"mt-2 size-2 shrink-0 rounded-full bg-success-100\" aria-hidden=\"true\"\/><span class=\"text-body\">Eight malware-laced games allegedly compromised approximately 8,000 devices.<\/span><\/li>\n<li class=\"m-0 flex items-start gap-s !text-[#434248]\"><span class=\"mt-2 size-2 shrink-0 rounded-full bg-success-100\" aria-hidden=\"true\"\/><span class=\"text-body\">Attackers reportedly accessed about 80 cryptocurrency wallets and removed at least $220,000.<\/span><\/li>\n<li class=\"m-0 flex items-start gap-s !text-[#434248]\"><span class=\"mt-2 size-2 shrink-0 rounded-full bg-success-100\" aria-hidden=\"true\"\/><span class=\"text-body\">A 21-year-old Florida man faces a federal charge of conspiracy to obtain computer information for private financial gain tied to the scheme.<\/span><\/li>\n<\/ul>\n<\/div>\n<\/div>\n<h2>Malware Campaign Focused on Cryptocurrency Wallets<\/h2>\n<p>Malware concealed inside downloadable games allegedly harvested credentials that attackers used to enter cryptocurrency accounts and remove victims\u2019 digital assets. <a href=\"https:\/\/www.local10.com\/news\/local\/2026\/07\/15\/feds-accuse-broward-man-in-video-game-malware-conspiracy-victims-lost-220k-in-crypto\/\" target=\"_blank\" rel=\"noopener noreferrer\">Local 10 News first reported the case<\/a> on July 15, citing a 15-page federal criminal complaint that outlined the alleged malware scheme.<\/p>\n<p>The complaint alleges that the operation ran from May 2024 through February 2026, compromising roughly 8,000 devices through eight infected games. Federal investigators accuse Zyaire Dontaevious Zamarion Wilkins, 21, of North Lauderdale, Florida, of providing financial support for the malware operation and helping promote the campaign.<\/p>\n<h2>Hidden Malware Spread Through Video Games<\/h2>\n<p>Court documents describe software embedded inside eight games that allegedly collected passwords, wallet credentials, browser data, and other sensitive information after victims installed the titles. Authorities estimate the stolen information ultimately enabled unauthorized access to approximately 80 cryptocurrency wallets.<\/p>\n<p>Although investigators did not identify the distribution platform by name, details in the complaint point to Steam. <a href=\"https:\/\/forms.fbi.gov\/victims\/Steam_Malware\" target=\"_blank\" rel=\"noopener noreferrer\">The FBI is gathering information from potential victims of its Steam malware investigation<\/a>, including people who downloaded BlockBlasters, Chemia, Dashverse\/DashFPS, Lampy, Lunara, PirateFi, Tokenova, or other games associated with the case.<\/p>\n<p>Security researchers previously identified wallet-stealing malware inside PirateFi before Steam removed the title, illustrating how cybercriminals can abuse legitimate gaming marketplaces to distribute malicious software at scale. <a href=\"https:\/\/news.bitcoin.com\/steam-kicks-out-pirate-game-for-stealing-crypto-wallets\/\">PirateFi\u2019s removal from Steam<\/a> highlighted the growing threat of malware hidden inside game downloads.<\/p>\n<h2>Automated Bots Helped Identify Crypto Holders<\/h2>\n<p>Discord, Telegram, X, and LinkedIn allegedly became marketing channels for the infected games, while automated bots reportedly searched online communities for people with significant cryptocurrency holdings. The targeted account holders then received customized messages encouraging them to install the software.<\/p>\n<p>After infecting a device, the malware allegedly searched for login credentials, cryptocurrency wallet information, and authentication data. Investigators maintain that members of the conspiracy examined the stolen files and identified wallets they could access and drain.<\/p>\n<h2>Bitcoin and Gift Cards Created a Digital Trail<\/h2>\n<p>Encrypted Signal conversations allegedly showed Wilkins using the handle \u201cSibel.eth\u201d while communicating with the suspected primary malware developer. According to the complaint, those exchanges included discussions about purchasing a $10,000 remote access trojan and conducting campaigns designed to empty victims\u2019 cryptocurrency wallets.<\/p>\n<p>Bitcoin transactions linked to the alleged operation eventually led investigators to Bitrefill, where more than 150 digital gift cards were allegedly purchased using cryptocurrency tied to the scheme. Most were redeemed for Uber Eats orders, and subpoenaed records connected deliveries to Wilkins\u2019 university addresses and his South Florida residence.<\/p>\n<p>Agents executing a search warrant recovered electronic devices and three cryptocurrency wallet seed phrases, including one allegedly associated with a Monero wallet.<\/p>\n<p>Transaction records reviewed by authorities allegedly showed that Wilkins sent or received approximately $382,000 in cryptocurrency. He now faces one count of conspiracy to obtain computer information for private financial gain, an offense carrying a maximum sentence of 10 years in prison.<\/p>\n<\/p><\/div>\n<p><a href=\"https:\/\/news.bitcoin.com\/8000-devices-infected-80-crypto-wallets-accessed-by-video-game-malware\/\">Source link <\/a><br \/>\n<br \/><\/p>\n","protected":false},"excerpt":{"rendered":"<p>(Originally posted on : Bitcoin News ) Key Takeaways Eight malware-laced games allegedly compromised approximately 8,000 devices. Attackers reportedly accessed about 80 cryptocurrency wallets and removed at least $220,000. A 21-year-old Florida man faces a federal charge of conspiracy to obtain computer information for private financial gain tied to the scheme. Malware Campaign Focused on [&hellip;]<\/p>\n","protected":false},"author":11,"featured_media":75935,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"om_disable_all_campaigns":false,"_monsterinsights_skip_tracking":false,"_monsterinsights_sitenote_active":false,"_monsterinsights_sitenote_note":"","_monsterinsights_sitenote_category":0},"categories":[32],"tags":[],"_links":{"self":[{"href":"https:\/\/crowdfundjunction.com\/blog\/wp-json\/wp\/v2\/posts\/75934"}],"collection":[{"href":"https:\/\/crowdfundjunction.com\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/crowdfundjunction.com\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/crowdfundjunction.com\/blog\/wp-json\/wp\/v2\/users\/11"}],"replies":[{"embeddable":true,"href":"https:\/\/crowdfundjunction.com\/blog\/wp-json\/wp\/v2\/comments?post=75934"}],"version-history":[{"count":0,"href":"https:\/\/crowdfundjunction.com\/blog\/wp-json\/wp\/v2\/posts\/75934\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/crowdfundjunction.com\/blog\/wp-json\/wp\/v2\/media\/75935"}],"wp:attachment":[{"href":"https:\/\/crowdfundjunction.com\/blog\/wp-json\/wp\/v2\/media?parent=75934"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/crowdfundjunction.com\/blog\/wp-json\/wp\/v2\/categories?post=75934"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/crowdfundjunction.com\/blog\/wp-json\/wp\/v2\/tags?post=75934"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}