惯性聚合 高效追踪和阅读你感兴趣的博客、新闻、科技资讯
阅读原文 在惯性聚合中打开

推荐订阅源

Martin Fowler
Martin Fowler
OSCHINA 社区最新新闻
OSCHINA 社区最新新闻
IT之家
IT之家
美团技术团队
酷 壳 – CoolShell
酷 壳 – CoolShell
Y
Y Combinator Blog
T
Tailwind CSS Blog
D
Docker
博客园 - Franky
freeCodeCamp Programming Tutorials: Python, JavaScript, Git & More
Google DeepMind News
Google DeepMind News
腾讯CDC
Vercel News
Vercel News
Engineering at Meta
Engineering at Meta
U
Unit 42
The Cloudflare Blog
S
SegmentFault 最新的问题
WordPress大学
WordPress大学
爱范儿
爱范儿
Recent Announcements
Recent Announcements
博客园 - 聂微东
博客园 - 叶小钗
H
Help Net Security
MyScale Blog
MyScale Blog

GRAHAM CLULEY

US Coast Guard and FBI board oil tanker to investigate cyber attack Smashing Security podcast #485: These researchers got drunk to hack an LG TV Former AT&T store worker jailed after moonlighting as a SIM-swap gang's inside man Smashing Security podcast #484: How websites are tracking you with silence CRPx0 ransomware: what you need to know The US military just turned off ad tracking on its phones. Maybe you should too How a hole in Lenovo's login system let hackers walk into 5,000 Dropbox accounts Smashing Security podcast #483: This AI helps thieves steal your iPhone Revolut scam steals £180,000 from Jersey residents in just four weeks Shai-Hulud hackers: two men charged over TeamPCP's global supply chain crime spree that hit OpenAI, and thousands more US Navy tells sailors and their families: scrub your social media, enemies are watching Smashing Security podcast #482: This hacker leaked GTA 6 - and launched their own cryptocurrency Malicious Firefox add-ons caught stealing cryptowallet seed phrases and browser credentials Gunra ransomware: what you need to know Smashing Security podcast #481: Never say this to a robot dog Prison for data analyst who tried to extort $2.5 million from his employer An "invisible" car? Researcher uses machine learning to hide vehicles from Flock cameras Smashing Security podcast #480: This is the AI service you should never sign up to Meta's Ray-Bans are being banned from pubs, restaurants, and theatres Beware cut-price AI services that read your every word Apple's bug bounty program is drowning in so much AI slop, it is in danger of missing serious exploits Smashing Security podcast #479: How a fake police officer nearly stole Graham’s cryptocurrency Smashing Security podcast #479: How a fake police officer nearly stole Graham’s cryptocurrency Fake IRS letters target cryptocurrency holders The $5 million threat: AI Is supercharging phishing attacks North Korea's elite hackers turned on their own government — and got caught Smashing Security podcast #478: This job interview could destroy your company OpenAI's AI "goes rogue" and hacks Hugging Face: what you need to know Smashing Security podcast #477: How 14 orders of chicken McNuggets helped nail a suspected Russian hacker Ukraine warns fake CAPTCHAs are being used to make you hack yourself
'Anne Hathaway' admits leading $245 million crypto theft ...
Graham CLULEY · 2026-09-10 · via GRAHAM CLULEY

Here's a tip for any budding cybercriminals out there.

If you're going to steal a quarter of a billion dollars worth of cryptocurrency, maybe don't broadcast on a group chat every time you buy a Lamborghini, or blow half a million dollars on a single night out at a nightclub.

Because it might just be that you draw the attention of the authorities.

That's a lesson that 22-year-old Singaporean Malone Lam has now learnt the hard way, after pleading guilty to heading up a group that stole over US $245 million in cryptocurrency from victims across the United States.

Lam - who used online aliases such as "Anne Hathaway", "$$$", and "King Greavy" - is said to have operated his criminal operation from October 2023 until May 2025, recruiting accomplices through online gaming platforms.

Regular readers of Hot for Security may recognise Lam's name. Back in October 2024, we wrote about how he was arrested after allegedly tricking a single victim out of US $230 million worth of Bitcoin while posing as Google Support.

Further alleged members of the gang were charged in May 2025 for being part of the same racketeering conspiracy - providing different functions such as database hackers, target identifiers, callers, money launderers, and even burglars who would actually physically break into victims' homes to steal their hardware cryptocurrency wallets.

One of those charged was even memorably found to have stuffed approximately US $25,000 in cash inside Squishmallow plush toys to move the money around.

According to the US Department of Justice, Lam's gang spent their criminal proceeds extravagantly, running up nightclub tabs of half a million dollars a night, purchasing luxury cars worth up to US $3.8 million each, renting mansions in LA, the Hamptons, and Miami, and even hiring private jets and a team of private security guards.

Such conspicuous spending for someone like Lam, who was barely out of his teens, attracted precisely the sort of attention from the police investigators that a cooler-thinking criminal might know to avoid.

The party days are over now for Lam, who faces up to 20 years in prison when he is eventually sentenced. Fellow conspirator Evan Tangeman, 22, was sentenced in April 2026 to more than five years for laundering stolen funds, and other members of the gang are still working their way through the courts.

It's a staggering amount of money to have stolen and to have spent. The sad truth remains that the easiest way to part a cryptocurrency holder from their fortune is simply to talk them out of it, using social engineering tricks like fake tech support calls and spoofed numbers.

If you are fortunate enough to own a large amount of cryptocurrency for legitimate reasons, you should know to always be wary of anyone who asks you to share your screen on a support call or asks for a 2FA code. You money may be a lot more safely stored in a hardware cold wallet.