- Incident Details
- Investigation and Findings
- Arrests and Recoveries
In a shocking incident, cybercriminals executed a sophisticated social engineering attack that resulted in the theft of $243 million from a single individual. The sophisticated social engineering attack involved a series of carefully orchestrated steps, culminating in the theft of cryptocurrency funds from the victim’s wallet.
Incident Details
The attack unfolded on August 19, 2024, when a group of cybercriminals, including Greavys (Malone Iam), Wiz (Veer Chetal), and Box (Jeandiel Serrano), targeted a Genesis creditor. ZachXBT posted a thread on the platform X that provides detailed information about the hack. The criminals used a series of deceptive phone calls to convince the victim to reset their two-factor authentication (2FA) and share their private keys, granting them access to the victim’s cryptocurrency holdings.
Investigation and Findings
As per ZachXBT, the investigation required the use of advanced blockchain analysis tools, social media monitoring, and OSINT (Open Source Intelligence). The investigation revealed key details about the attackers’ identities and locations. Greavys, identified as Malone Iam, flaunted his ill-gotten wealth through a lavish lifestyle funded by the stolen $243 million. He reportedly purchased over 10 luxury cars and frequently spent between $250,000 to $500,000 per night at clubs in LA and Miami, where he and his friends would hand out Birkin bags to women. His identity was confirmed through video clips, chats, and posts on his Instagram account. Investigators used open-source intelligence (OSINT) to track his location through posts by his friends and associates.
Arrests and Recoveries
As a result of the investigation, both Box and Greavys were arrested last evening in Miami and LA. Law enforcement likely seized additional funds during the arrests, as significant transfers were observed around the same time. With the help of Cryptoforensic Investigators, zeroShadow, and the Binance Security Team, over $9 million of the stolen funds have been frozen, and more than $500,000 has already been returned to the victim following a thorough investigation.
The incident highlights the importance of vigilance in securing personal data and exercising caution when engaging with support through phone calls or other communication channels.
