news.mlab.sh
Back to the feed
threat-intel

Party’s Over for Crypto Scammers Who Went on a Spending Spree After a $240 Million Bitcoin Theft

High
Summary

A network of young men, led by 22-year-old Malone Lam, engaged in a sophisticated cryptocurrency theft scheme, culminating in over $240 million stolen from a Washington D.C. resident. Following the initial heist, the group embarked on a lavish spending spree, acquiring luxury goods and properties while evading law enforcement. The investigation, which involved social engineering and money laundering, led to the arrest of several key figures, including Lam and Serrano, and resulted in the recovery of a significant portion of the stolen funds. The case highlights a growing trend of young cybercriminals exploiting vulnerabilities and leveraging social engineering to commit large-scale fraud.

A network of young men, led by 22-year-old Malone Lam, engaged in a sophisticated cryptocurrency theft scheme, culminating in over $240 million stolen from a Washington, D.C. resident. Following the initial heist, the group embarked on a lavish spending spree, acquiring luxury goods and properties while evading law enforcement. The investigation, which involved social engineering and money laundering, led to the arrest of several key figures, including Lam and Serrano, and resulted in the recovery of a significant portion of the stolen funds. The case highlights a growing trend of young cybercriminals exploiting vulnerabilities and leveraging social engineering to commit large-scale fraud.

Initially, the group, including Lam, Veer Chetal, and Jeandiel Serrano, targeted a wealthy crypto investor in Washington, D.C., using a social engineering tactic. They impersonated Google and Gemini representatives to gain access to the man’s accounts and security codes, allowing Lam to siphon off over 4,100 Bitcoin. The group then employed money laundering specialists to convert the stolen cryptocurrency into government-issued cash and move it through multiple exchange platforms.

Following the initial theft, the group indulged in a month-long spending spree, purchasing sports cars, jets, and renting mansions in Miami and the Hamptons. Serrano, while vacationing in the Maldives, was identified as a suspect when he failed to conceal his IP address during an account creation on a cryptocurrency exchange. Chetal’s parents were targeted in a carjacking in Connecticut after Chetal’s parents were forced out of their new car.

Authorities eventually apprehended Lam at one of his Miami mansions on Sept. 18, 2024, after an off-duty law enforcement officer tipped them off. Serrano was arrested at Los Angeles International Airport, wearing a $500,000 watch, and initially denied involvement before admitting to possessing approximately $20 million of the stolen funds. Eighteen defendants have been charged, with Lam expected to be the 11th to plead guilty. The judge presiding over Lam’s case estimates his sentencing guidelines would recommend a prison term of at least 14 years upon conviction. Several co-defendants have already been sentenced, including money launderers, and one, Tucker Desmond, was sentenced to probation after pleading guilty to destroying evidence.

Read the full article at SecurityWeek