This article mostly uses the story as a way to scare people into using banks:
Banks are tightly regulated by laws meant to protect consumers from theft and fraud. They can freeze accounts or reverse funds, set limits on the amounts that can be transferred in one day, and flag suspicious activities.
Crypto, meanwhile, is attractive because of the autonomy it affords account holders, said Ari Redbord, head of global policy at TRM Labs, a firm that monitors and investigates digital-asset fraud.
What's slightly different about this case is that they attackers were getting a lot smarter about using food and package delivery services as cover to get people to open their door.
“They would get screenshots from the person behind it, like, ‘Hey, this guy’s DoorDashing up at this place. Go pick up a fake order.”
Records show at least two victims in the recent California attacks were expecting a delivery when the suspect arrived carrying the same item or a similar one. In the San Francisco and Los Angeles cases, the suspects called their victims on multiple occasions — from the same phone number — to confirm a time to accept their purported delivery. In at least three of the cases, the victims received food deliveries that they didn’t order prior to the attack.
KYC leaks probably played a role in these, but there's also this part:
The thieves ultimately made off with $10 million in Bitcoin and $3 million in Ethereum — holdings the victim later told police were publicly known.
But even if you don't talk about your stack in public, there's the chance that kyc data gets leaked:
The victim later told officers he believed he was targeted because information on his crypto holdings had recently been leaked, according to a police report.
In early 2000s I was living in Latin America for work for a year or so...at the time "K&R Insurance" was a thing (Kidnap and Ransom). US companies would get K&R insurance on their executives....eventually the cartels just got all their associates to work for the insurance companies to leak the list....which was like gold to them....so they had a complete map of who to kidnap.
Wouldn't be surprised if they are doing same things to acquire KYC list.
KYC = kill your customers
Jameson Lopp has been following physical attacks forever. His thread and comments are worth a read. https://x.com/lopp/status/2041517349531197690
Yes, that's where I saw the article. I think he recently stopped keeping a comprehensive list of wrench attacks because there were too many to track.
https://twiiit.com/lopp/status/2041517349531197690
The game theory around this is fascinating. Victims can be attackers too.
Why?
Would be curious where the “leak” originated. Attackers coordinating these attacks don’t seem to be going for low hanging fruit…yet.