It can be labeled, but this does not stop the thief from moving it. Otherwise, the network would need to fork, which will never happen for somethign like this. Even if it did fork, he would still be left with pre-forked coins, which would be worth something. In the case of the Ethereum Dao hacker, the thief still got Ethereum Classic coins worth millions.