They very likely traced them after they left Monero much like similar to many clickbait articles of the past. It mentions the criminals using credit cards, but authorities are too vague on the details to know for sure yet (probably purposely)