That is just terrible opsec. The millisecond the money has moved, you need to destroy all of that equipment.
Don't worry, he also had a ""POST-EXPLOITATION" plan.
Which included, among other things, "KEEP the configs Burn the evidence, including the histfile Book flight to: Pack Bags"