# Malone Lam

Type: Person

Source: Cyber Intelligence Brief — https://getcyberbrief.com/entity/malone-lam
Canonical HTML page: https://getcyberbrief.com/entity/malone-lam

## Timeline

- **2026-12-08**: Status hearing scheduled — A status hearing is scheduled for December 8, 2026; no sentencing date has been announced.
- **2026-09-08**: Guilty plea entered — Lam pleaded guilty to one count of RICO conspiracy before Judge Colleen Kollar-Kotelly in the U.S. District Court for the District of Columbia.
- **2025-05**: Enterprise operation window ends — Court documents indicate the operation continued through at least May 2025.
- **2024-08-18**: 4,100 BTC stolen from Washington, DC resident — Lam and Jeandiel Serrano allegedly defrauded a Washington, DC resident of more than 4,100 Bitcoin, worth over $230 million at the time.
- **2024**: Victim identified as Genesis creditor — Blockchain investigator ZachXBT identified the victim as a Genesis creditor, connecting the theft to the crypto lender's collapse.
- **2023-10**: Operation begins and Lam moves to the US — Court documents say the enterprise operated from no later than October 2023; Lam moved to the US the same month under the Visa Waiver Program.

## Recent coverage (3 stories)

### Crypto theft ring used social engineering to steal 4,100 BTC
2026-09-09 10:28:35 · Sentiment: Negative · Impact: 6/10 · Sources: 2

The Lam case shows a mature threat model blending social engineering, online community recruitment, and physical home invasions to steal $245M–$265M in cryptocurrency. Security teams can extract direct lessons about high-net-worth targeting and the limits of technical controls.
Full story: https://getcyberbrief.com/story/malone-lam-cyber-heist-4100-btc

### Social Engineering Led $245M Bitcoin Theft; Guilty Plea Shows Human Risk
2026-09-08 19:36:14 · Sentiment: Negative · Impact: 6/10 · Sources: 2

Cybersecurity teams get a high-loss case study in how social engineering, not technical exploitation, enabled a network of young attackers to steal $245 million in Bitcoin from a D.C. resident. The guilty plea underscores the need for identity verification and transaction confirmation controls.
Full story: https://getcyberbrief.com/story/social-engineering-245m-bitcoin-theft-guilty-plea

### $240M Bitcoin Heist Suspects' Spending Spree Broke Their OpSec
2026-09-07 18:45:20 · Sentiment: Neutral · Impact: 6/10 · Sources: 2

Attackers socially engineered a victim into surrendering bitcoin keys worth more than $240 million, then burned their anonymity on luxury purchases. The FBI arrest within a month shows how spend-out behavior, rather than blockchain laundering alone, can expose cybercriminals. Cybersecurity teams can extract lessons in identity obfuscation, transaction tracing, and social engineering defense.
Full story: https://getcyberbrief.com/story/240m-bitcoin-heist-spending-spree-opsec-cyber

---
This page is a machine-readable summary. Sentiment measures the directional read of each development for this entity, not the tone of the reporting; impact weights consequence, not syndication reach. See https://getcyberbrief.com/guides/methodology for the full editorial methodology.