The FBI arrested a hacker who was spreading malware through free Steam games to steal cryptocurrency.

The perpetrators operate through the EncryptHub (Larva-208) group. They used the Steam platform as a reliable delivery channel for viruses to end users. They infected about 8,000 computers and drained at least 80 major crypto wallets, stealing more than $220,000.

The scammers published fake or indie games that looked like real ones, launched and ran, but secretly infected the system in the background.
The projects were actively promoted on Discord, Telegram, and X (Twitter).
The attackers targeted specific gamers who, according to blockchain data, had large crypto holdings, and lured them into downloading the game.
The embedded trojan (RAT) and info-stealer scanned the system, stole passwords, browser cookies, Steam authorization files, as well as crypto wallet extensions (for example, MetaMask), copying private keys and seed phrases.

The FBI identified 8 major dangerous titles that have already been removed from Steam:
BlockBlasters (the most well-known game in the scheme, through which the most funds were stolen).
PirateFi
Chemia
Dashverse
DashFPS
Lampy
Lunara
Tokenova

In July 2026, the FBI arrested a 21-year-old hacker, Zair Wilkins, in Florida, who, with his accomplices, embedded trojans into indie games on Valve’s platform.
The investigation tracked down the hacker via a chain of financial transactions. He exchanged the stolen cryptocurrency through crypto services for digital gift cards and used them to pay for food delivery in Uber Eats to his real home address.

And yet only 1 hacker was caught.

$BTC $ETH $EVAA