Cryptocrook ringleader, 22, who met crew on Minecraft admits role in $245M heist
- ID
- 22820
- Status
- summarized
- Published
- 09 Sep 2026, 9:39 PM
- Fetched
- 10 Sep 2026, 12:03 AM
- Provider
- The Register
- Category
- technology
- Original URL
- https://www.theregister.com/cyber-crime/2026/09/09/cryptocrook-ringleader-22-who-met-crew-on-minecraft-admits-role-in-245m-heist/5295273
- Source URL
- https://www.theregister.com/headlines.atom
Summary
- Score
- 3.5
- Created
- 10 Sep 2026, 1:10 AM
- Tags
- Audience
- developerssaas_founders
What happened
Malone Lam, a 22-year-old Singaporean national and Miami resident, pleaded guilty in the US for leading a crew that stole and laundered hundreds of millions in cryptocurrency between October 2023 and May 2025. The group met on Minecraft, used social engineering calls impersonating Google, Yahoo, Coinbase, and Gemini to trick high-net-worth victims into surrendering credentials, and in one case arranged a physical burglary to steal a hardware wallet.
Why it matters
The attack chain—databases of high-net-worth crypto holders combined with impersonation of trusted platforms to harvest credentials—is a concrete reminder that social engineering remains the dominant vector for high-value crypto theft. If you build products handling crypto custody or user credentials, assume attackers will impersonate your support channels and target your users directly.
Discussion angle
How the crew's blend of database-driven victim selection and platform impersonation maps to what SaaS teams should defend against when their users are targeted outside the product itself