According to CryptoSlate, U.S. federal criminal filings show that the FBI identified a 21-year-old suspect, Zyaire Wilkins, by tracking Bitrefill gift cards purchased using the Bitcoin addresses involved in the case and combining them with Google Cookies, call records, and more than 500 Uber Eats delivery orders. Wilkins is alleged to have funded and assisted in the promotion of actions involving malware planted in Steam games; about 8,000 devices were infected, and about 80 crypto wallets were drained of at least $220k.

When the FBI searched his residence, it also found three sets of encrypted wallet seed phrases, including a Monero wallet that cumulatively received and sent about 1,233 XMR, with trading activity valued at about $382k, but the filing did not confirm whether that portion of funds was related to the victims’ losses. Wilkins has been charged with conspiracy to obtain information by computer for the purpose of obtaining economic benefit.