Hacker News Reader

Shouldn't it be possible to track who bought the esim, where the data is sent, and who owns the wallets where the stolen crypto is transferred?

They tracked the traffic (not the eSIMs) to some servers in Hong Kong, managed by Alibaba.

It's easy to buy eSIMs anonymously. Either directly with cryptocurrency, or with a prepaid virtual credit card bought with cryptocurrency.