In a dramatic crypto heist, three hackers executed a scheme that defrauded a single victim of $243 million on August 19, 2024.
The attackers, known by their aliases Greavys, Wiz, and Box, used a combination of social engineering and technical expertise to execute the fraud.
The operation began with the hackers impersonating Google Support via a deceptive phone call, which helped them gain the victim’s trust. They then pretended to be Gemini Support to convince the victim their account was compromised. This manipulation led the victim to change their two-factor authentication settings and transfer funds to the hackers’ wallet.
The criminals continued their deceit by persuading the victim to install AnyDesk, a remote desktop application. This allowed them to obtain the victim’s private keys and access the $243 million in digital assets.
To obscure their tracks, the hackers moved the funds through over 15 exchanges, converting them among Bitcoin, Litecoin, Ethereum, and Monero. However, during an investigation, one hacker, Wiz, inadvertently revealed his real name, aiding investigators.
Greavys used the stolen money to indulge in a lavish lifestyle, buying luxury cars and spending extravagantly on nightlife in LA and Miami, while Box’s consistent online presence with identifiable photos made tracking easier.
The collaborative efforts of blockchain experts and security teams led to the seizure of $9 million of the stolen funds and the arrest of Greavys and Box. Investigations are ongoing, with authorities expecting further recoveries and arrests.
In the wake of the $230 million hack at Indian crypto exchange WazirX, the attackers have moved another $12 million worth of Ethereum.
In Komsomolsk-on-Amur, a city in Russia’s Far East, an unnamed individual has been detained on charges of high treason for allegedly sending cryptocurrency to Ukraine’s military.
The Block reports that the Banana Gun team is currently investigating reports of a user wallet breach and has temporarily shut down the platform.
The U.S. Securities and Exchange Commission (SEC) has initiated legal action against Rari Capital, a decentralized finance platform, and its founders.