Observed Signal · Jul 23, 2026 · Law Enforcement / Arrest · Source: t3n · Impact: 2/5 · Sentiment: Negative
Steam fake games infected 8,000 PCs; FBI arrests suspect
Between May 2024 and February 2026, cybercriminals published seven fake games on Valve's Steam platform that concealed malware designed to harvest credentials and other sensitive data to access cryptocurrency wallets. The campaign infected nearly 8,000 PCs and allowed attackers to empty roughly 80 wallets, stealing about $220,000. The operators promoted the malicious titles via social media and bots to target high-value crypto holders; victims included Twitch streamer RastalandTV, who lost $32,000 and later died in March 2026. The FBI, working with affected gamers, traced stolen funds through Bitrefill vouchers and arrested a 21-year-old suspect in Florida. Authorities say the accused bought a Remote-Access Trojan for about $10,000 and faces charges including conspiracy to distribute malware, which carries potential prison terms of roughly 5–20 years.
Significant security incident affecting a major gaming storefront with crypto theft and an FBI arrest; relevant for platform trust and user security but limited direct impact on core AdTech industry operations.
Track Valve Signals & Market Shifts in Real-Time
Polaris7 autonomous intelligence agents track regulatory filings, primary sources, executive changes, and deal flow 24/7. Create your free Explorer workspace to monitor these entities.
Key Takeaways & Evidence Grounding
- The campaign ran May 2024–February 2026 via seven fake games on Steam.
- Nearly 8,000 PCs were infected.
- About 80 cryptocurrency wallets were emptied, with roughly $220,000 stolen; victims included streamer RastalandTV (lost $32,000; died March 2026).
- The FBI traced Bitrefill vouchers and arrested a 21-year-old suspect from Florida.
- Authorities say the attacker bought a Remote-Access Trojan for about $10,000; charges include conspiracy to distribute malware (possible 5–20 years imprisonment).
Connected Companies & Entities
5 Entities mapped“The malware-infected games were played on the platform of Valve....”
“The stolen funds were reportedly used, among other things, to pay for Uber Eats deliveries....”
“This article was published by the digital publisher t3n....”
“The page indicates external content from TargetVideo GmbH supplements the editorial offering....”
Ontology Mapping & Concepts
Related Market Signals & Shifts
Recent verified developments and strategic activity across this market segment.
FBI arrests man over Steam games that drained crypto
U.S. prosecutors say 21-year-old Florida resident Zyaire Wilkins uploaded malware-laden fake video games to Steam that infected users, stole credentials and drained cryptocurrency wallets. The FBI arrested Wilkins on July 14–15, 2026, and prosecutors allege he and unnamed co-conspirators published several malicious games over the past two years, infecting around 8,000 victims and hacking roughly 80 cryptocurrency wallets to steal at least $220,000 in crypto. The group allegedly marketed the fraudulent games via Discord, LinkedIn and Telegram. Federal agents executed a search warrant at Wilkins’ residence and seized laptops, phones and digital wallets. Valve (Steam’s maker) has removed multiple games previously found to contain malware; the FBI has asked victims to come forward to assist the investigation.
Steam Wallpapers Infected with Malware
Security researchers (Kaspersky) report that dozens of user-created wallpapers for the Wallpaper Engine on Steam have been found to contain malware since late 2025. Attackers packed malicious files inside archives (sometimes protected by passwords that were published with the wallpaper) so that animated wallpapers and minigames could execute foreign code on Windows and Android devices. Infections installed backdoors that fetched additional payloads to steal Steam login credentials, deploy ransomware, and run hidden crypto‑miners. Valve removed the identified wallpapers and suspended the associated accounts. Kaspersky and the article advise avoiding app-based wallpapers from Steam Workshop and using antivirus tools to detect and quarantine suspicious files.
Australian arrests alleged TeamPCP hackers in supply‑chain attacks
Australian Federal Police arrested two people in Perth accused of membership in TeamPCP, a hacking group blamed for widespread software supply‑chain attacks. The suspects face more than a dozen charges including hacking and money laundering; authorities say the group tampered with popular open‑source projects to deploy malicious code that stole credentials and data for extortion. The FBI estimates the intrusions impacted more than 1,000 organizations and that over half a million credentials were stolen. Investigations began in April 2026 after tips from cybersecurity firms. Independent reporter Brian Krebs has identified one alleged suspect as Ruben Thomson (handle “Ellis”), who told Krebs he led TeamPCP until March 2026. Australian officials said they seized devices and stolen data and plan to notify victims; extradition by the US Department of Justice is not yet clear.
Track Real-Time Market Signals & Shifts
Set up custom watchlists to receive automated, evidence-grounded executive digests whenever material signals or shifts occur across your tracked landscape.