StellarCrowandClaude Fable 5.1
499fd61f79
Until now only cases 357+ (plus a few older ones) had their linked URLs fetched; the other 252 dossiers held just the text pasted into the spreadsheet, often only the lede. This pass fetches every linked URL for those cases so the full text is on file before link rot takes it. - stage_all.py: new --include-sheet-cases flag that lifts the skip on cases holding spreadsheet articles. Resumable as before. - staging/: raw extracts and index.json for the 252 cases. - sourced-articles.json, case-files-manifest.json: 188 new UNTRIMMED blocks. 179 cases gained at least one fetched article; 73 got none (49 BLOCKED, 18 THIN, 9 DEAD, 4 video/social, 3 ERROR). - sources/*.txt: rebuilt with build_cases.py --all. Sheet pastes are kept; fetched blocks sit beside them under the NOT YET TRIMMED banner. Files previously committed with CRLF are now LF. - wayback-availability.json: Wayback snapshots exist for 73 of the 98 failed URL slots; input for an archive-fetch pass. - README-START-HERE.md: progress note and next step. verify_all.py PASSES (1836 checks). Co-Authored-By: Claude Fable 5.1 <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_01GZZENdTLzNGsbNy4DyF1yt
300 lines
19 KiB
Plaintext
300 lines
19 KiB
Plaintext
================================================================================================
|
||
CASE 450 | Undisclosed | July ?, 2024 | USA
|
||
================================================================================================
|
||
|
||
DATABASE RECORD
|
||
id 450
|
||
date July ?, 2024
|
||
original_date July ?, 2024
|
||
year 2024
|
||
month 7
|
||
quarter 2024-Q3
|
||
victim Undisclosed
|
||
location New Mexico
|
||
country USA
|
||
scenario Home Invasion
|
||
description Multi-day surveillance of a target's residence using a cell phone planted outside the home to monitor movements, and when co-conspirators confirmed via iCloud tracking that the victim had left, they broke into the home by smashing a window with a brick and searched for the target hardware wallet.
|
||
kidnappings 0
|
||
violence_torture 0
|
||
drugs_alcohol (null)
|
||
weapons (null)
|
||
theft 1
|
||
life_taken 0
|
||
money_wanted Crypto
|
||
coin_type They took a hardware wallet. Undisclosed amount.
|
||
reports Washington Times
|
||
notes He was captured on the victim's home surveillance camera. Outcome of the hardware wallet search not specified in available sources.
|
||
has_processed_date 0
|
||
created_at 2026-05-28 16:55:43
|
||
|
||
AI SUMMARY [generated at bulk import, NOT verified against sources]
|
||
**Victims:** Unnamed individual. New Mexico (specific city not disclosed). Targeted for significant cryptocurrency holdings in hardware wallet.
|
||
|
||
**Attackers:** Ferro alone on-site. Co-conspirators remotely tracked victim's location via iCloud account and coordinated timing of break-in.
|
||
|
||
**Attack Method:** Ferro planted a cell phone outside victim's residence for several days to monitor movements. When co-conspirators confirmed via iCloud that victim had departed, Ferro smashed a window with a brick and entered. Searched for hardware wallet. Captured on victim's home surveillance camera.
|
||
|
||
**Violence Used:** Breaking and entering. No occupants present. Brick used to smash window.
|
||
|
||
**Crypto Demanded/Stolen:** Amount not specified in available sources. Target was a hardware wallet. Outcome of search not confirmed publicly.
|
||
|
||
**Status:** Part of the same RICO conspiracy (24cr417). Ferro captured on victim's surveillance camera during the burglary. Arrested May 13, 2025. Convicted and sentenced as part of the broader case (78 months, May 6, 2026). Investigation by USAO-DC, FBI Washington/LA/Miami, IRS-CI.
|
||
|
||
LINKED SOURCES
|
||
[url] https://www.washingtontimes.com/news/2026/may/7/gothferrari-gets-65-years-role-250m-crypto-theft-conspiracy/
|
||
[url_2] https://www.bleepingcomputer.com/news/security/crypto-gang-member-gets-65-years-for-role-in-230-million-heist/
|
||
[url_3] https://beincrypto.com/gothferrari-crypto-theft-78-month-sentence/
|
||
|
||
------------------------------------------------------------------------------------------------
|
||
FETCHED ARTICLE 1 [RAW EXTRACT — NOT YET TRIMMED]
|
||
!! This is the whole page as extracted. It still contains site furniture,
|
||
!! and may contain teaser headlines for UNRELATED cases. Trim on read-through.
|
||
!! Do not quote from it without checking the passage belongs to this case.
|
||
Source washingtontimes.com
|
||
URL https://www.washingtontimes.com/news/2026/may/7/gothferrari-gets-65-years-role-250m-crypto-theft-conspiracy/
|
||
Field url
|
||
Retrieved 2026-08-06T13:38:08+00:00 via raw HTTP retrieval, deterministic extraction (HTTP 200)
|
||
Language unknown
|
||
Kept paragraphs ALL 22 paragraphs, untrimmed
|
||
Length 4,604 chars
|
||
Integrity sha256 aadcbd49f192122751a97ef50c733c5e5dc86f4a1eda328fd8a017aaff140b02
|
||
Trimmed NOT TRIMMED. Full page extract; trim on read-through.
|
||
Caveat retrieved from a live page on the date above. Unlike text copied
|
||
from the spreadsheet, there is no second copy to hash it against.
|
||
------------------------------------------------------------------------------------------------
|
||
|
||
ORIGINAL (unknown, verbatim as retrieved)
|
||
|
||
California man gets more than 6 years for role in $250M crypto theft conspiracy
|
||
|
||
Building the health care Americans deserve
|
||
|
||
Things to do in D.C.
|
||
|
||
Fight for thee and liberty: 'Defiant Ones' has the story of Two Kettles Together
|
||
|
||
WATCH: The Sitdown With Alex Swoyer
|
||
|
||
Sen. Rick Scott on Fauci, voter ID and 2026 Senate odds
|
||
|
||
WATCH: Inside the ‘Donroe Doctrine’ and the shifting politics of Latin America
|
||
|
||
|
||
Michael Shifter joins Guy Taylor
|
||
|
||
LISTEN: America’s communist problem
|
||
|
||
Michael Lucci joins Bold and Blunt
|
||
|
||
By The Washington Times AI News Desk
|
||
|
||
|
||
|
||
-
|
||
|
||
|
||
|
||
|
||
Thursday, May 7, 2026
|
||
|
||
A 20-year-old California man has been sentenced to 78 months in federal prison for his role in a sprawling social engineering conspiracy that stole well over $250 million in cryptocurrency from victims across the United States, the U.S. Attorney’s Office for the District of Columbia announced.
|
||
|
||
Marlon Ferro, of Santa Ana, also known as “GothFerrari,” was sentenced in U.S. District Court before Judge Colleen Kollar-Kotelly, who also ordered three years of supervised release and $2.5 million in restitution. Ferro pleaded guilty Oct. 17, 2025, to one count of conspiracy to participate in a racketeer influenced and corrupt organization.
|
||
|
||
Prosecutors said a multi-year investigation uncovered a sprawling criminal enterprise that defrauded victims of more than $250 million in cryptocurrency between late 2023 and early 2025. Members based in California, Connecticut, New York, Florida and abroad filled specialized roles including database hacking, target identification, fraudulent phone calls, money laundering and residential burglary, according to court documents.
|
||
|
||
The conspiracy’s operatives typically targeted individuals believed to hold significant cryptocurrency holdings and manipulated victims into surrendering access to their digital wallets. When victims stored funds in hardware wallets — physical devices that cannot be accessed remotely — the enterprise turned to Ferro to steal them outright, prosecutors said.
|
||
|
||
In February 2024, Ferro traveled to Winnsboro, Texas, broke into a victim’s home and stole a hardware wallet containing about 100 bitcoin, then valued at more than $5 million, according to court documents. He then laundered the stolen funds through cryptocurrency exchanges.
|
||
|
||
In July 2024, Ferro flew to New Mexico, where he surveilled a residence for several days and positioned a cell phone outside the home to monitor the victim’s movements, prosecutors said. When co-conspirators tracking the victim through his iCloud account confirmed he had left, Ferro broke into the home by smashing a window with a brick and searched for the target hardware wallet. He was captured on the home’s surveillance camera.
|
||
|
||
Beyond burglary, court documents show Ferro also served as a key money launderer, using fraudulent identification documents obtained from a foreign national to open a digital payment card account on a geo-blocked platform that allowed enterprise members to spend stolen cryptocurrency at retail locations and nightclubs. He purchased more than $255,000 in designer clothing on behalf of co-conspirators using stolen funds.
|
||
|
||
After a conspiracy leader was arrested in September 2024, Ferro continued assisting him from the outside — collecting hundreds of thousands of dollars in cryptocurrency, converting it to cash through illicit exchanges and using the proceeds to pay the jailed leader’s attorneys, prosecutors said.
|
||
|
||
Ferro was arrested May 13, 2025, and found in possession of two firearms and a fake identification document.
|
||
|
||
The investigation was conducted by the U.S. Attorney’s Office for the District of Columbia, the FBI Washington Field Office and the Internal Revenue Service Criminal Investigation Washington Field Office. The case was prosecuted by Assistant U.S. Attorneys Christopher Howland and David Liss, with assistance from former Assistant U.S. Attorney Will Hart.
|
||
|
||
This article was constructed with the assistance of artificial intelligence and published by a member of The Washington Times' AI News Desk team. The contents of this report are based solely on The Washington Times' original reporting, wire services, and/or other sources cited within the report. For more information, please read our AI policy or contact Steve Fink, Director of Artificial Intelligence, at sfink@washingtontimes.com
|
||
|
||
The Washington Times AI Ethics Newsroom Committee can be reached at aispotlight@washingtontimes.com.
|
||
|
||
Copyright © 2026 The Washington Times, LLC.
|
||
|
||
Click
|
||
here for reprint permission.
|
||
|
||
Please read
|
||
our comment policy before commenting.
|
||
|
||
------------------------------------------------------------------------------------------------
|
||
FETCHED ARTICLE 2 [RAW EXTRACT — NOT YET TRIMMED]
|
||
!! This is the whole page as extracted. It still contains site furniture,
|
||
!! and may contain teaser headlines for UNRELATED cases. Trim on read-through.
|
||
!! Do not quote from it without checking the passage belongs to this case.
|
||
Source bleepingcomputer.com
|
||
URL https://www.bleepingcomputer.com/news/security/crypto-gang-member-gets-65-years-for-role-in-230-million-heist/
|
||
Field url_2
|
||
Retrieved 2026-08-06T13:38:09+00:00 via raw HTTP retrieval, deterministic extraction (HTTP 200)
|
||
Language unknown
|
||
Kept paragraphs ALL 34 paragraphs, untrimmed
|
||
Length 4,653 chars
|
||
Integrity sha256 dd09dbb79398e6b55e25f03960835087244c8324c45e043e4b275f5fa26ad968
|
||
Trimmed NOT TRIMMED. Full page extract; trim on read-through.
|
||
Caveat retrieved from a live page on the date above. Unlike text copied
|
||
from the spreadsheet, there is no second copy to hash it against.
|
||
------------------------------------------------------------------------------------------------
|
||
|
||
ORIGINAL (unknown, verbatim as retrieved)
|
||
|
||
Crypto gang member gets 6.5 years for role in $230 million heist
|
||
|
||
A 20-year-old California man was sentenced to 78 months in prison for serving as a home invader and money launderer in a criminal ring that stole over $250 million in cryptocurrency.
|
||
|
||
Marlon Ferro (also known online as GothFerrari and Marlo) was arrested on May 13, 2025, carrying two firearms and a fake identification document. He pleaded guilty in October and was also ordered to pay $2.5 million in restitution and serve three years of supervised release.
|
||
|
||
According to court documents, the criminal ring targeted individuals believed to hold significant cryptocurrency between late 2023 and early 2025.
|
||
|
||
They used social engineering to trick their victims into giving them access to digital wallets, and when victims stored funds in hardware wallets, the conspiracy shifted to Ferro's expertise in residential burglaries.
|
||
|
||
"Marlon Ferro served as the criminal enterprise's instrument of last resort. When his co-conspirators couldn't deceive victims into handing over access to their cryptocurrency or hack their way into digital accounts, they turned to Ferro to break into homes and steal hardware wallets outright," said U.S. Attorney Pirro on Wednesday.
|
||
|
||
"This scheme blended sophisticated online fraud with old-fashioned burglary to drain victims of millions of dollars in digital assets."
|
||
|
||
In February 2024, Ferro traveled to Winnsboro, Texas, broke into a victim's home, stole a hardware wallet containing approximately 100 Bitcoins (then valued at more than $5 million), and laundered the funds through cryptocurrency exchanges.
|
||
|
||
In July, the same year, Ferro flew to New Mexico, monitored a victim's home for several days using a cell phone, and broke in by smashing a window with a brick after accomplices tracking the victim's location through his iCloud account confirmed they had left the residence.
|
||
|
||
He also opened a fraudulent digital payment card account using fake identification to enable his accomplices to spend stolen funds at nightclubs and retail locations, and to buy more than $255,000 in designer clothing on their behalf.
|
||
|
||
Additionally, after one of the criminal ring's leaders was jailed in September 2024, Ferro continued laundering cryptocurrency to fund the leader's legal defense.
|
||
|
||
Last month, 22-year-old Evan Tangeman of Newport Beach, California, was also sentenced to 70 months in prison for laundering funds stolen in the same massive cryptocurrency heist.
|
||
|
||
In all, fourteen suspects were charged in September 2024 and May 2025 with a RICO conspiracy involving over 4,100 Bitcoin (worth more than $230 million at the time) and laundering the stolen funds through mixing services and crypto exchanges.
|
||
|
||
They used the stolen cryptocurrency to finance lavish lifestyles, including private security guards, nightclub outings ranging up to $500,000 per evening, international travel, high-end watches, and designer handbags for their girlfriends.
|
||
|
||
The criminal group also rented homes in the Hamptons, Los Angeles, and Miami for $40,000 to $80,000 per month, as well as private jets and a fleet of at least 28 cars valued from $100,000 to $3.8 million.
|
||
|
||
Security teams log 54% of successful attacks and alert on just 14%. The rest move through your environment unseen.
|
||
|
||
The Picus whitepaper shows how breach and attack simulation tests your SIEM and EDR rules so threats stop slipping by detection.
|
||
|
||
Apple sued over fake App Store crypto wallet app stealing $1.8M in Bitcoin
|
||
|
||
Hackers steal $23.7 million in crypto from Ostium in off-chain attack
|
||
|
||
US charges two over laundering $43 million from investment fraud
|
||
|
||
Money launderer accused of stealing seized crypto while in prison
|
||
|
||
Ransom Cartel ransomware creator sentenced to 16 years in prison
|
||
|
||
Sergiu Gatlan
|
||
Sergiu is a news reporter who has covered the latest cybersecurity and technology developments for over a decade. Email or Twitter DMs for tips.
|
||
|
||
You need to login in order to post a comment
|
||
|
||
Hotel Wi-Fi attacks use custom malware to breach Microsoft 365 accounts
|
||
|
||
Massive ChainDrop npm supply-chain attack infects hundreds of packages
|
||
|
||
OpenAI, Anthropic AI agents targeted real people and systems in cyber tests
|
||
|
||
Spend four hours inside a fully-simulated underground with DARKROOM.
|
||
|
||
AI is a data-breach time bomb: Read the new report
|
||
|
||
Webinar: Shadow AI in 2026 (and how attackers are taking advantage)
|
||
|
||
Explore ESET’s H1 2026 Threat Report to uncover the latest AI, phishing, and ransomware trends.
|
||
|
||
Stay one step ahead of new threats in the new year. Join Huntress for the monthly Tradecraft Tuesday.
|
||
|
||
Help us understand the problem. What is going on with this comment?
|
||
|
||
Submitting...
|
||
|
||
------------------------------------------------------------------------------------------------
|
||
FETCHED ARTICLE 3 [RAW EXTRACT — NOT YET TRIMMED]
|
||
!! This is the whole page as extracted. It still contains site furniture,
|
||
!! and may contain teaser headlines for UNRELATED cases. Trim on read-through.
|
||
!! Do not quote from it without checking the passage belongs to this case.
|
||
Source beincrypto.com
|
||
URL https://beincrypto.com/gothferrari-crypto-theft-78-month-sentence/
|
||
Field url_3
|
||
Retrieved 2026-08-06T13:38:10+00:00 via raw HTTP retrieval, deterministic extraction (HTTP 200)
|
||
Language unknown
|
||
Kept paragraphs ALL 28 paragraphs, untrimmed
|
||
Length 3,570 chars
|
||
Integrity sha256 db0d2617b10cad5681c5010effcd57dddfc154606e7d808827e4bfa448f3d0af
|
||
Trimmed NOT TRIMMED. Full page extract; trim on read-through.
|
||
Caveat retrieved from a live page on the date above. Unlike text copied
|
||
from the spreadsheet, there is no second copy to hash it against.
|
||
------------------------------------------------------------------------------------------------
|
||
|
||
ORIGINAL (unknown, verbatim as retrieved)
|
||
|
||
Crypto Burglar Known as ‘GothFerrari’ Draws 78-Month Prison Term
|
||
|
||
Crypto Burglar Known as ‘GothFerrari’ Draws 78-Month Prison Term
|
||
|
||
GothFerrari was sentenced to 78 months for role in a social engineering conspiracy.
|
||
|
||
The enterprise tricked victims into surrendering wallets, then sent Ferro to burglarize homes.
|
||
|
||
Stolen funds bankrolled $500K nightclub tabs, Birkin bags, and exotic cars worth millions.
|
||
|
||
A US judge has sentenced a California man known as GothFerrari to 78 months in prison for his role in a crypto social engineering ring that turned to home burglaries when victims could not be deceived online.
|
||
|
||
Marlon Ferro, 20, of Santa Ana, also faces $2.5 million in restitution and three years of supervised release.
|
||
|
||
Inside the $250 Million Crypto Theft Ring
|
||
|
||
A multi-year federal investigation revealed that the enterprise drained more than $250 million in cryptocurrency from victims between late 2023 and early 2025. Its members operated out of California, Connecticut, New York, Florida, and overseas.
|
||
|
||
The crew specialized in roles that included database hacking, target identification, fraudulent phone calls, and money laundering. When social engineering failed, the ring sent Ferro to physically steal hardware wallets from victims’ homes.
|
||
|
||
“Marlon Ferro served as the criminal enterprise’s instrument of last resort… they turned to Ferro to break into homes and steal hardware wallets outright,” US Attorney Pirro said.
|
||
|
||
Brick-Through-Window Crypto Burglaries and Designer Spending
|
||
|
||
According to the press release, in February 2024, Ferro broke into a home in Winnsboro, Texas, and stole a hardware wallet. The device held roughly 100 Bitcoin (BTC), then valued at more than $5 million.
|
||
|
||
That July, Ferro went to New Mexico and surveilled a residence with a hidden cell phone. He smashed a window with a brick when co-conspirators tracking the victim’s iCloud account signaled the home was empty.
|
||
|
||
Beyond burglaries, Ferro laundered funds for the ring. Using fake identification from a foreign national, he opened a geo-blocked payment card account. The setup funneled over $255,000 in designer clothing to co-conspirators.
|
||
|
||
Stolen money also bankrolled extravagant spending. Court papers cite nightclub tabs of up to $500,000 per night and Hermès Birkin bags. Private jets and exotic cars valued up to $3.8 million were also part of the haul.
|
||
|
||
Authorities arrested Ferro in May 2025 with two firearms in his possession. He pleaded guilty in October 2025 to one count of conspiracy to participate in a racketeering-influenced and corrupt organization
|
||
|
||
To read the latest cryptocurrency market analysis from BeInCrypto, click here.
|
||
|
||
More on Security (Crypto Scams and Hacks)?
|
||
|
||
Stani Kulechov: How Aave Processed $500M in Liquidations Without Breaking
|
||
|
||
Can Robinhood Finally Deliver ‘Private Equity for All’?
|
||
|
||
Adam Back: Satoshi’s Email & The Future of Bitcoin
|
||
|
||
Dubai’s New AI Immigration Cleared 9.4 Million Travelers: The Future of Travel?
|
||
|
||
Start trading with Bitrue welcome bonuses
|
||
|
||
Random 100-1,000 USDT futures coupon + up to 1,000 USDT in deposit bonuses
|
||
|
||
Insights, news and analysis of the crypto market straight to your inbox
|
||
|
||
Best Crypto Platforms for DePIN Tokens in 2026
|
||
|
||
BeInCrypto is committed to unbiased, transparent reporting. This news article aims to provide accurate, timely information. However, readers are advised to verify facts independently and consult with a professional before making any decisions based on this content. Please note that our Terms and Conditions, Privacy Policy, and Disclaimers have been updated.
|
||
|
||
================================================================================================
|
||
generated from attacks-export-Gart-website.json + reported_K&R | case 450
|
||
================================================================================================
|