US shuts down cyber crime ring launched by Ukrainian

Acting assistant attorney general John Cronan at the daily briefing at the White House.
Acting assistant attorney general John Cronan at the daily briefing at the White House.

The US Justice Department yesterday announced one of its largest takedowns of a global cyber crime ring, saying it had indicted 36 people accused of trafficking in stolen identities and causing more than $530 million in losses to consumers.

The cyber crime network, operating as an online discussion forum known as "Infraud," ran a sophisticated scheme that facilitated the purchase and sale of Social Security numbers, birthdays and passwords that had been stolen from around the world, the department said.

The group worked under the slogan "In Fraud We Trust" and was created in 2010 by Svyatoslav Bondarenko, a 34-year-old Ukrainian, according to the indictment.

In launching it, the indictment alleges he referred to the online forum as a "comfortable and safe" place to "bring together professional people for who carding and hacking become a lifestyle".

ITWeb Security Summit 2018

Registration is open for ITWeb Security Summit 2018, which will feature cyber security guru Mikko Hypponen and other international infosec players as plenary speakers. Get involved in #SS18HACK and choose from two half-day workshops or a full-day Boot Camp plus five training courses. Click here for the agenda. For the first time, ITWeb Security Summit will also take place in Cape Town.

He created a hierarchy within the organisation, and vetted proposed advertising on the site for stolen wares. He also banned members from buying or selling stolen devices or other items that belonged to Russian victims, according to the indictment.

In addition to facilitating the sale of stolen information, the network provided an escrow account people could use to launder their proceeds using digital currencies including Bitcoin, Liberty Reserve, Perfect Money and WebMoney. That service was run by Sergey Medvedev, a co-founder of the Infraud site, according to the indictment.

Of the 36 people indicted, Justice Department officials said 13 have been arrested in the United States, Australia, the United Kingdom, France, Italy, Kosovo and Serbia.

They face charges that include identity theft, bank fraud, wire fraud and money laundering.

The other defendants remain at large and the investigation is still ongoing, deputy assistant attorney general David Rybicki told reporters during a conference call.

"Today marks a significant step in the battle against transnational cyber crime," he said.

The indictment said that among the stolen items advertised were 795 000 HSBC bank logins, dozens of PayPal logins and credentials, and credit card numbers. Users could also use the site to advertise malware for sale.

In April 2016, the department alleges, Medvedev took over as the "admin and owner" of the site, after he posted on a note online saying Bondarenko had gone missing.

Have your say
Facebook icon
Youtube play icon