Cryptocurrency scam worth $1.8 million busted: Five-year international manhunt concludes in one net

ZkSnarker · 2025-12-28T19:20:11+00:00

A cross-border cryptocurrency scam case has been cracked, with a Lithuanian suspect extradited for embezzling $1.8 million using the malicious software KMSAuto. The software appears harmless on the surface but intercepted 840 transactions, warning users to be cautious when downloading unknown software.

ZkSnarker

2025-12-28 19:20:11

Abstract generation in progress

[Crypto World] A transnational cryptocurrency scam case finally has a resolution. Recently, South Korean authorities extradited a 29-year-old Lithuanian suspect who, through carefully disguised malware, successfully stole $1.8 million in digital assets.

The entire modus operandi appears simple but is highly deceptive. The man distributed a software called KMSAuto, which on the surface claimed to be a Windows activation tool, but in reality concealed malicious intent. In a short period, this “trojan” was downloaded over 2 million times, with the vast number of potential victims drawing significant attention.

The true horror lies in the details. Once users install this seemingly harmless program, malicious code silently takes over the transaction process. The gang ultimately intercepted 840 transactions, transferring funds from over 3,100 wallets to their own accounts. This is not just a simple virus infection—it’s a carefully orchestrated financial plunder.

Fortunately, the five-year-long investigation did not come to nothing. Collaborative efforts by law enforcement agencies across multiple countries, including a raid in Lithuania, finally severed this transnational crime chain. This case serves as a reminder to all cryptocurrency users: be cautious of any unknown software downloads and do not relax your vigilance for the sake of convenience.

View Original

This page may contain third-party content, which is provided for information purposes only (not representations/warranties) and should not be considered as an endorsement of its views by Gate, nor as financial or professional advice. See Disclaimer for details.

7 Likes

Reward
7
8
Repost
Share

Comment

0/400

SchrodingerAirdrop

· 2025-12-31 14:26

2 million downloads, wow. That must have tricked so many people. Luckily, I didn't fall for it.

View OriginalReply0

SpeakWithHatOn

· 2025-12-31 01:33

2 million downloads, how many people have been tricked... The name KMSAuto sounds innocent, but it’s all just scams.

View OriginalReply0

TrustlessMaximalist

· 2025-12-28 19:49

2 million downloads... This guy is really bold, fishing so openly and shamelessly. --- Installing KMSAuto reduces the number of wallets, this method is indeed ruthless. Hope everyone stays alert. --- $1.8 million just disappeared like that. Why do some people still fall for those shady activation tools? --- It took five years to catch them. The law enforcement efficiency in cybercrime is a bit concerning. --- 840 transactions were intercepted. How many people haven't realized their money is gone yet? --- That's why I say self-custody must be vigorously promoted. Centralized exchanges can't defend against this stuff. --- The problem is, a new KMSAuto will appear next time, just change the name and it will still deceive. --- Over 3,100 wallets caught in one net. This method is truly brilliant.

View OriginalReply0

ShibaSunglasses

· 2025-12-28 19:44

2 million downloads, wow, this guy's methods are impressive... but he was eventually caught. This is what you call reaping what you sow.

View OriginalReply0

PessimisticLayer

· 2025-12-28 19:41

Damn, 2 million downloads... How many people must have fallen for it? It's terrifying when you think about it.

View OriginalReply0

CantAffordPancake

· 2025-12-28 19:40

Wow, 2 million downloads. How many people did that screw over? This is really fucking outrageous.

View OriginalReply0

FlippedSignal

· 2025-12-28 19:34

Whoa, 2 million downloads, how many people must have been fooled... The name KMSAuto is really clever, who would have thought that an activation tool could be a Trojan horse? --- It's just another disguise of a Windows tool, I've seen this trick many times, yet some still fall for it. --- It took five years to break through $1.8 million, how low-profile does it have to be... but in the end, it was caught; there's no privacy on the chain. --- 840 transactions from 3,100 wallets were scanned, that requires very detailed on-chain analysis to lock down. --- Seriously, this is why you should use a hardware wallet. No matter how powerful, it can't take over offline signatures. --- It took five years to extradite a 29-year-old... international law enforcement is indeed slow, but it's better than nothing. --- The question is, how did this guy hide in Korea for five years? Did they not pursue him from the start?

View OriginalReply0

GasFeeCrybaby

· 2025-12-28 19:21

Whoa, 2 million downloads? Is this guy playing with a Dragon Slayer sword here? --- Can you still trust KMSAuto? It’s about time to run this on a virtual machine. --- $1.8 million solved after five years... That efficiency is truly impressive. --- So now even activation tools require checking the source code, right? --- Only caught 840 transactions so far. Feels like there are more that haven't been discovered. --- 3,100 wallets transferred... This guy’s wallet management is more professional than mine. --- Why does Korea tend to arrest these cases first, while Lithuania has no movement? --- Malware, wallets, transactions—this is getting really sophisticated. --- That’s why I never download anything on computers connected to exchanges. --- What’s the point of catching a scam? The money’s probably already spent.

View OriginalReply0