ZachXBT tracks 3,670 ETH as Danny Khan arrest ties to Genesis, Kroll hacks

cryptonews12-10

On-chain sleuth ZachXBT traces 3,670 ETH to suspect Danny Khan as Dubai raid, Genesis creditor theft and Kroll SIM swap links surface amid U.S. indictment. Summary ZachXBT flags 3,670 ETH ...

Source Link

Disclaimer: Investing carries risk. This is not financial advice. The above content should not be regarded as an offer, recommendation, or solicitation on acquiring or disposing of any financial products, any associated discussions, comments, or posts by author or other users should not be considered as such either. It is solely for general information purpose only, which does not consider your own investment objectives, financial situations or needs. TTM assumes no responsibility or warranty for the accuracy and completeness of the information, investors should do their own research and may seek professional advice before investing.

Comments

We need your insight to fill this gap

Leave a comment

{"i18n":{"language":"en_US"},"isChannel":false,"data":{"share":"https://ttm.financial/m/news/2590051583?lang=en_US&edition=fundamental","thumbnail":"","is_english":true,"pubTime":"2025-12-10 18:09","share_image_url":"https://static.laohu8.com/e9f99090a1c2ed51c021029395664489","id":"2590051583","market":"us","top_or_hot":-1,"title":"ZachXBT tracks 3,670 ETH as Danny Khan arrest ties to Genesis, Kroll hacks","media":"cryptonews","content":"<div>\n<p>On-chain sleuth ZachXBT traces 3,670 ETH to suspect Danny Khan as Dubai raid, Genesis creditor theft and Kroll SIM swap links surface amid U.S. indictment.\n\n\nSummary\n\n\n\nZachXBT flags 3,670 ETH ...</p>\n\n<a href=\"https://crypto.news/zachxbt-tracks-3670-eth-as-danny-khan-arrest-ties-to-genesis-kroll-hacks/\">Source Link</a>\n\n</div>\n","source":"crypto_news_highlight","html":"<!DOCTYPE html>\n<html>\n<head>\n<meta http-equiv=\"Content-Type\" content=\"text/html; charset=utf-8\" />\n<meta name=\"viewport\" content=\"width=device-width,initial-scale=1.0,minimum-scale=1.0,maximum-scale=1.0,user-scalable=no\"/>\n<meta name=\"format-detection\" content=\"telephone=no,email=no,address=no\" />\n<title>ZachXBT tracks 3,670 ETH as Danny Khan arrest ties to Genesis, Kroll hacks</title>\n<style type=\"text/css\">\na,abbr,acronym,address,applet,article,aside,audio,b,big,blockquote,body,canvas,caption,center,cite,code,dd,del,details,dfn,div,dl,dt,\nem,embed,fieldset,figcaption,figure,footer,form,h1,h2,h3,h4,h5,h6,header,hgroup,html,i,iframe,img,ins,kbd,label,legend,li,mark,menu,nav,\nobject,ol,output,p,pre,q,ruby,s,samp,section,small,span,strike,strong,sub,summary,sup,table,tbody,td,tfoot,th,thead,time,tr,tt,u,ul,var,video{ font:inherit;margin:0;padding:0;vertical-align:baseline;border:0 }\nbody{ font-size:16px; line-height:1.5; color:#999; background:transparent; }\n.wrapper{ overflow:hidden;word-break:break-all;padding:10px; }\nh1,h2{ font-weight:normal; line-height:1.35; margin-bottom:.6em; }\nh3,h4,h5,h6{ line-height:1.35; margin-bottom:1em; }\nh1{ font-size:24px; }\nh2{ font-size:20px; }\nh3{ font-size:18px; }\nh4{ font-size:16px; }\nh5{ font-size:14px; }\nh6{ font-size:12px; }\np,ul,ol,blockquote,dl,table{ margin:1.2em 0; }\nul,ol{ margin-left:2em; }\nul{ list-style:disc; }\nol{ list-style:decimal; }\nli,li p{ margin:10px 0;}\nimg{ max-width:100%;display:block;margin:0 auto 1em; }\nblockquote{ color:#B5B2B1; border-left:3px solid #aaa; padding:1em; }\nstrong,b{font-weight:bold;}\nem,i{font-style:italic;}\ntable{ width:100%;border-collapse:collapse;border-spacing:1px;margin:1em 0;font-size:.9em; }\nth,td{ padding:5px;text-align:left;border:1px solid #aaa; }\nth{ font-weight:bold;background:#5d5d5d; }\n.symbol-link{font-weight:bold;}\n/* header{ border-bottom:1px solid #494756; } */\n.title{ margin:0 0 8px;line-height:1.3;color:#ddd; }\n.meta {color:#5e5c6d;font-size:13px;margin:0 0 .5em; }\na{text-decoration:none; color:#2a4b87;}\n.meta .head { display: inline-block; overflow: hidden}\n.head .h-thumb { width: 30px; height: 30px; margin: 0; padding: 0; border-radius: 50%; float: left;}\n.head .h-content { margin: 0; padding: 0 0 0 9px; float: left;}\n.head .h-name {font-size: 13px; color: #eee; margin: 0;}\n.head .h-time {font-size: 11px; color: #7E829C; margin: 0;line-height: 11px;}\n.small {font-size: 12.5px; display: inline-block; transform: scale(0.9); -webkit-transform: scale(0.9); transform-origin: left; -webkit-transform-origin: left;}\n.smaller {font-size: 12.5px; display: inline-block; transform: scale(0.8); -webkit-transform: scale(0.8); transform-origin: left; -webkit-transform-origin: left;}\n.bt-text {font-size: 12px;margin: 1.5em 0 0 0}\n.bt-text p {margin: 0}\n</style>\n</head>\n<body>\n<div class=\"wrapper\">\n<header>\n<h2 class=\"title\">\nZachXBT tracks 3,670 ETH as Danny Khan arrest ties to Genesis, Kroll hacks\n</h2>\n\n<h4 class=\"meta\">\n\n\n2025-12-10 18:09 GMT+8&nbsp;&nbsp;&nbsp;<a href=https://crypto.news/zachxbt-tracks-3670-eth-as-danny-khan-arrest-ties-to-genesis-kroll-hacks/><strong>cryptonews</strong></a>\n\n\n</h4>\n\n</header>\n<article>\n<div>\n<p>On-chain sleuth ZachXBT traces 3,670 ETH to suspect Danny Khan as Dubai raid, Genesis creditor theft and Kroll SIM swap links surface amid U.S. indictment.\n\n\nSummary\n\n\n\nZachXBT flags 3,670 ETH ...</p>\n\n<a href=\"https://crypto.news/zachxbt-tracks-3670-eth-as-danny-khan-arrest-ties-to-genesis-kroll-hacks/\">Source Link</a>\n\n</div>\n\n\n</article>\n</div>\n</body>\n</html>\n","isBrief":false,"type":0,"news_type":1,"symbol":"LU0205194284.USD","symbol_name":"SCHRODER ISF US SMALL & MID-CAP EQUITY \"A\" (USD) INC AV","start_time":0,"source_url":"https://crypto.news/zachxbt-tracks-3670-eth-as-danny-khan-arrest-ties-to-genesis-kroll-hacks/","article_id":"2590051583","we_media_id":null,"thumbnails":[],"rights":{"source":"crypto_news_highlight","url":"https://crypto.news/zachxbt-tracks-3670-eth-as-danny-khan-arrest-ties-to-genesis-kroll-hacks/","rn_cache_url":null,"directOrigin":true},"url":"https://stock-news.laohu8.com/highlight/detail?id=2590051583","pubTimestamp":1765361375,"columns":[],"sourceInfo":{"source_id":"crypto_news_highlight","name":"Crypto News"},"weMediaInfo":null,"summary":"On-chain sleuth ZachXBT traces 3,670 ETH to suspect Danny Khan as Dubai raid, Genesis creditor theft and Kroll SIM swap links surface amid U.S. indictment.ZachXBT flags 3,670 ETH consolidated into a tracked wallet, mirroring past law enforcement seizures tied to Danny Khan.The group allegedly laundered BTC, LTC, ETH and XMR across 15+ exchanges and is linked to the 2023 Kroll SIM swap affecting BlockFi, Genesis and FTX data.ZachXBT reported that Khan was last seen in Dubai, where authorities allegedly raided a villa and arrested others present. Multiple sources indicate those involved have not responded to messages in recent days, according to the report.Gemini transaction records, featured in a Discord video purportedly showing the conspirators celebrating, displayed Bitcoin moved to addresses controlled by the group, according to the report.The stolen funds were reportedly divided among the conspirators and cycled through over 15 cryptocurrency exchanges, with conversions made betwee","collect":0,"end_time":0,"defaultTopTitle":"crypto.news","property":[],"viewcount":null,"language":"en","relate_stocks":{"LU0205194284.USD":"SCHRODER ISF US SMALL & MID-CAP EQUITY \"A\" (USD) INC AV","LU0240877869.USD":"SCHRODER ISF GLOBAL SMALL COMPANIES \"A\" ACC","LU2360107168.USD":"BGF NEXT GENERATION TECHNOLOGY \"A4\" (USD) INC","BK4585":"ETF&股票定投概念","LU1861215975.USD":"贝莱德新一代科技基金 A2","LU2290526834.HKD":"BGF NEXT GENERATION TECHNOLOGY \"A2\" (HKDHDG) ACC","LU0289961442.SGD":"SUSTAINABLE GLOBAL THEMATIC PORTFOLIO \"AX\" (SGD) ACC","LU0289739343.SGD":"SUSTAINABLE GLOBAL THEMATIC PORTFOLIO \"A\" (SGD) ACC","ETH":"低成本以太坊ETF-Grayscale","LU0205193047.USD":"SCHRODER ISF US SMALL & MID-CAP EQUITY \"A\" (USD)  ACC","BK4601":"加密货币现货ETF","LU0106261612.USD":"SCHRODER ISF US SMALLER COMPANIES IMPACT \"A\" ACC","LU0012050646.USD":"SCHRODER ISF US SMALLER COMPANIES IMPACT \"A\" (USD) INC AV","LU1861220033.SGD":"Blackrock Next Generation Technology A2 SGD-H","LU0511384066.AUD":"SUSTAINABLE GLOBAL THEMATIC PORTFOLIO \"A\" (AUDHDG) ACC","LU0240878834.USD":"SCHRODER ISF GLOBAL SMALL COMPANIES \"A\" (USD) INC AV","BK4020":"通信设备","BK4588":"碎股"},"translate_title":"Danny Khan被捕与Genesis、Kroll黑客有关，ZachXBT追踪3,670 ETH","themeId":null,"isJumpTheme":false,"ttsUrl":null,"symbols_score_info":{"ETH":1.94},"content_text":"On-chain sleuth ZachXBT traces 3,670 ETH to suspect Danny Khan as Dubai raid, Genesis creditor theft and Kroll SIM swap links surface amid U.S. indictment.\n\n\nSummary\n\n\n\nZachXBT flags 3,670 ETH consolidated into a tracked wallet, mirroring past law enforcement seizures tied to Danny Khan.\nKhan and alleged co-conspirators face a superseding indictment over a Genesis creditor theft using fake Google and Gemini support plus AnyDesk access.\nThe group allegedly laundered BTC, LTC, ETH and XMR across 15+ exchanges and is linked to the 2023 Kroll SIM swap affecting BlockFi, Genesis and FTX data.\n\n\n\nBritish cybercrime suspect Danny Khan, also known online as Danish Zulfiqar, has reportedly been detained in Dubai, with authorities allegedly seizing cryptocurrency after approximately 3,670 Ethereum were transferred to a tracked wallet, according to reports.\n\nUpdate: A superseding indictment from a few hours ago confirmed my analysis that Danny / Danish Zulfiqar (Khan) was arrested in Dubai.Seizure address0xb37d617716e46511E56FE07b885fBdD70119f768 pic.twitter.com/rvX5U38nBW— ZachXBT (@zachxbt) December 9, 2025\n\nOn-chain investigator ZachXBT reported via Telegram channel that approximately 3,670 Ethereum were transferred into Ethereum wallet 0xb37d6…9f768 on Friday, where the funds were subsequently identified. “Several hours ago multiple addresses tied to him I was tracking consolidated funds to 0xb37d in a similar pattern to other law enforcement seizures,” the investigator stated.\nZachXBT tracks scammers from Lagos to Dubai\nZachXBT reported that Khan was last seen in Dubai, where authorities allegedly raided a villa and arrested others present. Multiple sources indicate those involved have not responded to messages in recent days, according to the report.\nA superseding indictment issued hours later confirmed that Danny Khan, also known as Danish Zulfiqar, was arrested in Dubai, according to the investigator.\nThe on-chain investigator had been tracking Khan since 2024, linking him to a theft from a Genesis creditor in August 2024. The alleged scheme involved co-conspirators Malone Lam, Veer Chetal, Chen, and Jeandiel Serrano, who executed a social engineering attack on an unnamed individual, according to the report.\nOn August 19, 2024, the group allegedly impersonated Google and Gemini support staff, convincing the victim to reset two-factor authentication, transfer Gemini funds to wallets they controlled, and share private Bitcoin keys via the remote desktop application AnyDesk, according to the investigator’s findings.\nGemini transaction records, featured in a Discord video purportedly showing the conspirators celebrating, displayed Bitcoin moved to addresses controlled by the group, according to the report.\nThe stolen funds were reportedly divided among the conspirators and cycled through over 15 cryptocurrency exchanges, with conversions made between Bitcoin (BTC), Litecoin (LITE), Ethereum (ETH), and Monero (XMR), according to ZachXBT.\nZachXBT also linked Khan to the August 2023 Kroll SIM swap incident, which exposed personal data of BlockFi, Genesis, and FTX creditors and resulted in significant losses via social engineering. Kroll confirmed the breach, stating a hacker had accessed an employee’s T-Mobile account through SIM swapping.\nAuthorities have not officially confirmed Khan’s arrest, though multiple sources indicate the case is actively being pursued, according to reports.\n\n\n\n\n\n                Read more:\n            \n\n                ETH whales scoop 934k tokens in 3 weeks while small holders dump supply","kind":"highlight","is_publish_news":true,"is_publish_highlight":false,"is_publish_live":false,"is_publish_wemedia":null,"editions":null,"column":"","sentiment":"0","news_tag":"","news_rank":0,"symbols":[],"gpt_button":0,"need_auth":false,"code":"91000000","status":"200"},"commentList":[],"isCommentEnd":true,"newsSizeData":{"likeSize":0,"commentSize":0,"repostSize":0,"favoriteSize":0,"likeStatus":false,"favoriteStatus":false},"APP":{"userAgent":"Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)","isDev":false,"isTTM":true,"deviceId":"web-server-community-laohu8-v3","version":"4.35.12","shortVersion":"4.35.12","platform":"web","vendor":"web","appName":"ttm","isIOS":false,"isAndroid":false,"isTiger":false,"isTHS":false,"isWeiXin":false,"isWeiXinMini":false,"isWeiBo":false,"isQQ":false,"isBaiduSwan":false,"isBaiduBox":false,"isDingTalk":false,"isToutiao":false,"isOnePlus":false,"isHuaWei":false,"isXiaomi":false,"isXiaomiWebView":false,"isOppo":false,"isVivo":false,"isSamsung":false,"isMobile":false},"href":"/m/news/2590051583","isCrawlerRequest":true}