Weeks after stealing victims' cryptocurrency, the fraudsters initiated a secondary recovery scam, contacting victims with false promises to retrieve their stolen funds for a fee.