“The attackers made an unusual error in this case by failing to keep money moving. The $2.3 million that ultimately was recovered was still sitting in the same Bitcoin account it had been delivered to.” How A New Team Of Feds Hacked The Hackers And Got Colonial Pipeline’s Ransom Back.