Singapore police disclose a cryptocurrency scam that stole $11.8 million through fake recruitment and malware