Close Menu
  • Home
  • Articles
    • Attacks
      • BEC
      • Data Breach
      • DDoS
      • Evasion Attacks
      • Injection
      • Malware
      • MITM
      • Phishing
      • Ransomware
      • RCE
      • Social Engineering
      • Spoofing
      • Spyware
    • Business and Policy
      • BCP and DRP
      • GRC
      • Regulations
    • Data Protection
      • DLP
      • DRM
      • Encryption
      • IAM
    • Future, Trends and Insight
      • AI
      • Events & Community
      • Emerging Tech
      • Expert Panel
      • Interviews With Experts
      • Insights
      • Study & Research
    • Resources
      • Guides
      • Tools
      • Training & Education
    • Security
      • API
      • Apps
      • Cloud
      • Critical Infrastructure
      • Endpoint
      • Hardware
      • IoT
      • Mobile
      • Network
      • OT
      • Port Security
      • Security Architecture
      • Software Development
      • Supply Chain
      • Zero Trust
    • Threats and Vulnerabilities
      • Emerging Threats
      • Insider Threats
      • Risk Management
      • Threat Intelligence
      • Zero Day
  • News and Exclusives
    • Latest News
    • ISB Exclusive
    • Positive News
  • Who We Are
    • About Us
    • Information Security Buzz Expert Panel​
    • Write for Us
    • Media Pack
  • Contact Us
  • Newsletter
Facebook X (Twitter) LinkedIn
Facebook X (Twitter) LinkedIn
Information Security BuzzInformation Security Buzz
  • Home
  • Articles
    • Attacks
      • BEC
      • Data Breach
      • DDoS
      • Evasion Attacks
      • Injection
      • Malware
      • MITM
      • Phishing
      • Ransomware
      • RCE
      • Social Engineering
      • Spoofing
      • Spyware
    • Business and Policy
      • BCP and DRP
      • GRC
      • Regulations
    • Data Protection
      • DLP
      • DRM
      • Encryption
      • IAM
    • Future, Trends and Insight
      • AI
      • Events & Community
      • Emerging Tech
      • Expert Panel
      • Interviews With Experts
      • Insights
      • Study & Research
    • Resources
      • Guides
      • Tools
      • Training & Education
    • Security
      • API
      • Apps
      • Cloud
      • Critical Infrastructure
      • Endpoint
      • Hardware
      • IoT
      • Mobile
      • Network
      • OT
      • Port Security
      • Security Architecture
      • Software Development
      • Supply Chain
      • Zero Trust
    • Threats and Vulnerabilities
      • Emerging Threats
      • Insider Threats
      • Risk Management
      • Threat Intelligence
      • Zero Day
  • News and Exclusives
    • Latest News
    • ISB Exclusive
    • Positive News
  • Who We Are
    • About Us
    • Information Security Buzz Expert Panel​
    • Write for Us
    • Media Pack
  • Contact Us
  • Newsletter
Subscribe
Information Security BuzzInformation Security Buzz
Home - Attacks - Chinese Tycoon Detained Over Alleged $11B ‘Pig Butchering’ Bitcoin Scam
Attacks Latest News News & Analysis Security

Chinese Tycoon Detained Over Alleged $11B ‘Pig Butchering’ Bitcoin Scam

Kirsten DoyleBy Kirsten DoyleJanuary 13, 20263 Mins Read
Share LinkedIn Twitter Facebook Copy Link Email
Pig Butchering Bitcoin Scam
Share
Facebook Twitter LinkedIn Email Copy Link
Quick AI Summary
ChatGPTClaudeGeminiGrokPerplexityDeepSeekCopilot

A Chinese-born billionaire wanted by US authorities for allegedly stealing at least $11 billion in bitcoin through a so-called “pig butchering” scam targeting Americans and others has been detained in Asia, according to the Wall Street Journal. 

Chen Zhi, the chairman of Cambodia-based multinational conglomerate Prince Group, was arrested by Cambodian law enforcement and extradited to China, government officials in Cambodia said. The country’s interior ministry stated that Chen was taken into custody at the request of the Chinese government as part of ongoing cooperation to combat transnational crime. 

In October, the US Justice Department said it was seeking Chen’s arrest on charges of wire fraud and money laundering, after seizing 127,271 bitcoin, valued at roughly $15 billion at the time. 

A “Huge” Business 

Margaret Cunningham, Vice President of Security & AI Strategy at Darktrace, said: “The business of pig butchering is absolutely huge. Professional scam organizations are investing a ton of resources into identifying targets via social media, and other channels, and building relationships with the targets, making them comfortable, and then ultimately ripping them off for everything they’ve got. It’s also worth highlighting that pig-butchering is a deeply “human” operation vs. a traditional style of technical cybercrime. The scam centers are using trafficked labor to work the targets and the more you look into it the worse it gets.” 

According to her, pig butchering scams often go unreported because victims feel ashamed, confused, or believe nothing can be done. “If you ask friends and family if they know anyone who’s been scammed, almost everyone will say yes, and they’ll usually have a story to tell. That shows how widespread the problem really is, even though it’s hidden by under-reporting. This under-reporting allows attackers to operate with little resistance. These scams succeed because they combine familiar psychological triggers with modern automation and infrastructure. AI accelerates phishing, SMS blasters deliver it straight to mobile devices, and cryptocurrency ensures the payout is permanent.” 

No Safety Net, Overarching Regulation 

April Lenhard, Principal Product Manager, Cyber Threat Intelligence at Qualys, added: “Cryptocurrency related-scams are so attractive for cyber criminals because there is no safety net or overarching regulation. With no central bank or governing body, there is no ultimate authority to claw back money for fraudulent transactions. Cross-border prosecution is a legal labyrinth most victims never escape, and prosecution will face almost insurmountable challenges. Dealing in cryptocurrency is most like regular cash: once it’s gone, it’s gone.” 

Lenhard said pig-butchering and romance schemes are emotional warfare, where the victims are sometimes conned out of their entire life savings. “Part of the problem is that there truly is another human being on the other end of the conversation, and they are incentivized to make you fall in love with their persona: that is their full-time job, and they are good at it. Scammers invest time, build trust, and then take the money and run.” 

When receiving a suspicious message from an unknown user: think objectively, get a second opinion from someone you trust, and always verify before you invest. The old adage still applies that if it seems too good to be true, it probably is. If an acquaintance you have never met is asking you to invest money, that is the quintessential sign of scheme. 

Kirsten Doyle
Kirsten Doyle
Information Security Buzz News Editor

Kirsten Doyle has been in the technology journalism and editing space for nearly 24 years, during which time she has developed a great love for all aspects of technology, as well as words themselves. Her experience spans B2B tech, with a lot of focus on cybersecurity, cloud, enterprise, digital transformation, and data centre. Her specialties are in news, thought leadership, features, white papers, and PR writing, and she is an experienced editor for both print and online publications.

  • Kirsten Doyle
    AI-Powered Attacks Become Top Concern for Security Professionals, New Filigran Survey Reveals
  • Kirsten Doyle
    ShinyHunters targets Oracle PeopleSoft customers through critical zero-day
  • Kirsten Doyle
    SIG report: AI-generated code is linked to twice the security risk and rising technical debt
  • Kirsten Doyle
    Miasma worm spreads from Red Hat packages to Microsoft repositories

The opinions expressed in this post belong to the individual contributors and do not necessarily reflect the views of Information Security Buzz.

Share. Facebook Twitter LinkedIn Email Copy Link

Related Posts

Miasma worm spreads from Red Hat packages to Microsoft repositories

June 11, 20264 Mins Read

Dutch police, NCSC take down major botnet

June 4, 20264 Mins Read

CrowdStrike, Google, and Shadowserver Foundation disrupt Glassworm botnet

June 1, 20265 Mins Read
ISB-Bora-Side-Bar

No se ha podido establecer conexión. Error 429

 
ISB-Bora-Side-Bar
Black ISB Logo

Information Security Buzz is an independent resource that provides the experts’ comments, analysis, and opinion on the latest Cybersecurity news and topics

X (Twitter) LinkedIn Facebook RSS

Working With Us

  • About Us
  • Advertise With Us
  • Contact Us

Write For Us

  • How To Contribute

The Pages

  • Privacy Policy
  • Cookie Policy
  • AI Policy
  • Terms & Conditions
  • Copyright Notice

Information Security Buzz and all its contents are copyright © 2014-2025. All rights reserved. All third-party trademarks are recognized.

Type above and press Enter to search. Press Esc to cancel.

Manage Consent
To provide the best experiences, we use technologies like cookies to store and/or access device information. Consenting to these technologies will allow us to process data such as browsing behavior or unique IDs on this site. Not consenting or withdrawing consent, may adversely affect certain features and functions.
Functional Always active
The technical storage or access is strictly necessary for the legitimate purpose of enabling the use of a specific service explicitly requested by the subscriber or user, or for the sole purpose of carrying out the transmission of a communication over an electronic communications network.
Preferences
The technical storage or access is necessary for the legitimate purpose of storing preferences that are not requested by the subscriber or user.
Statistics
The technical storage or access that is used exclusively for statistical purposes. The technical storage or access that is used exclusively for anonymous statistical purposes. Without a subpoena, voluntary compliance on the part of your Internet Service Provider, or additional records from a third party, information stored or retrieved for this purpose alone cannot usually be used to identify you.
Marketing
The technical storage or access is required to create user profiles to send advertising, or to track the user on a website or across several websites for similar marketing purposes.
  • Manage options
  • Manage services
  • Manage {vendor_count} vendors
  • Read more about these purposes
View preferences
  • {title}
  • {title}
  • {title}