US, International Law Enforcement Shut Down Massive Cybercrime Marketplace

The Infraud Organization was responsible for over $500 million in losses to institutions and individuals worldwide, the US Department of Justice says.

US law enforcement authorities in collaboration with their counterparts in over a dozen nations have taken down a major cybercrime organization that was responsible for some $530 million in losses over the past seven years.
Thirty-six individuals from 17 countries have been charged in connection with their alleged roles in the so-called Infraud Organization, including five from the US. Thirteen of the 36 individuals have been arrested so far. Eight of them are awaiting extradition to the United States. More arrests are expected to follow.
In a media call announcing the arrests Wednesday morning, Deputy Assistant Attorney General David Rybicki described the Infraud Organization as a global forum for buying and selling stolen payment card data, financial information, Social Security numbers, personal identity data, malware, and other products.
Infraud was truly the premier one-stop shop for cybercriminals worldwide, Rybicki said. Over the course of the Infraud Organizations seven-year history, its members targeted more than 4.3 million credit cards, debit cards, and bank accounts held by individuals around the world and in all 50 states.
The 50-page
indictment
unsealed today does not allege that Infraud members committed any actual data breaches. But those operating on the forum offered tools and services that certainly would have facilitated those activities, Rybicki said.
According to the indictment, Svyatoslav Bondarenko, 34, of Ukraine, founded Infraud in 2010. Over the years, it became the premier destination on the Internet for crooks looking to transact business with stolen credit card, financial, banking, and identity information. In addition to providing a platform that cybercriminals could safely use to sell stolen data, Infraud also provided an escrow service that members could use to transact business using digital currencies.
As of last March, Infraud had over 10,900 members, making it one of the largest such operations on the Internet prior to its takedown this week. The groups members included individuals from the US, Ukraine, Russia, Australia, United Kingdom, Pakistan, Kosovo, and Bangladesh. The five individuals who have been arrested in the US are from New York, San Diego, Los Angeles, and Alabama.
As has become common with other cybercrime operations these days, Infraud had a formal hierarchy in place with defined roles for members, according to the indictment papers. Administrators were responsible for strategic planning operations as well as for managing day-to-day operations. They were also responsible for approving and monitoring membership, and for meting out rewards and punishments to members. Individuals with subject-matter expertise in different areas were assigned Super Moderator roles, while Moderators were responsible for one or two subforums within their specific areas of expertise, the DOJ indictment noted. The forum also had vendors who sold stolen goods, and malware and members and VIP members worked to facilitate various criminal activities.
Todays indictment and arrests mark one of the largest cyber fraud enterprise prosecutions ever undertaken by the Department of Justice,” said John Cronin, acting assistant attorney general of the DOJs criminal division.
Infraud operated like a business to facilitate cyber fraud on a global scale, Cronin said, noting that the losses the group attempted to cause totaled more than $2.2 billion.
The charges in the case are the result of a joint investigation spearheaded by the US Immigration and Customs Enforcements Homeland Security Investigations unit and the Henderson Police Department in Nevada.
The case itself is being prosecuted by the prosecutors office in Nevada because of its familiarity with the details and the fact than 9,000 of Infrauds victims are from the state, said US Attorney Dayle Elieson of the District of Nevada during the media call.
The indictment charges the 36 individuals with racketeering, fraud, and seven other charges. They face a maximum of 20 years in federal prison on the racketeering charges and 10 years for each of the additional counts, Elieson said.
The Infraud takedown continues a string of major law-enforcement successes against cybercrime in recent years. Last year, the FBI and other US law enforcement agencies led an international operation that resulted in the takedown of the AlphaBay and Hansa criminal marketplaces. In December, the FBI, Europol, and others
took down Avalanche
, a massive malware operation involving 460 attack botnets.
Related content:
Major Online Criminal Marketplaces AlphaBay and Hansa Shut Down
FBI, Europol, Microsoft, ESET Team Up, Dismantle One of Worlds Largest Malware Operations
It Takes a Buck to Make a Million on the Dark Web
Cybercrime: A Black Market Price List from the Dark Web

Last News
▸ Veritabile Defecte de Proiectare a Securitatii in Software -> Top 10 Software Security Design Flaws ◂ Discovered: 23/12/2024 Category: security	▸ Sony, XBox Targeted by DDoS Attacks, Hacktivist Threats ◂ Discovered: 23/12/2024 Category: security	▸ There are plenty of online tools for reporting bugs. ◂ Discovered: 23/12/2024 Category: security

**Cyber Security Categories**
Google Dorks Database	Exploits Vulnerability	Exploit Shellcodes

CVE List

Tools/Apps

News/Aarticles

Phishing Database

Deepfake Detection

Trends/Statistics & Live Infos

Tags:
US, International Law Enforcement Shut Down Massive Cybercrime Marketplace