Search This Blog

Powered by Blogger.

Blog Archive

Labels

Showing posts with label German Police. Show all posts

German Police Bust Massive Cybercrime Hub 'Crimemarket' with 180,000 Users

 

The Düsseldorf Police in Germany have made a significant stride in the ongoing battle against cybercrime by dismantling Crimemarket, the largest cybercrime market in the country, with over 180,000 users. This illicit trading platform served as a hub for trading illegal drugs, narcotics, and cybercrime services, hosting tutorials and guides for various criminal activities. 

In a well-coordinated effort, law enforcement executed 102 search warrants across the country, resulting in the arrest of six individuals, including one of the operators. Crimemarket's extensive user base and its role as a breeding ground for illegal activities made it a prime target for authorities. The police operation carried out on the evening of February 29th, 2024, focused on North Rhine-Westphalia, where the main suspect, a 23-year-old man, was apprehended. Simultaneous operations in other federal states led to the arrest of three more individuals. 

During the searches, law enforcement seized a substantial amount of evidence, including cell phones, IT devices, and data carriers. In North Rhine-Westphalia alone, officers confiscated narcotics, including 1 kilogram of marijuana and various ecstasy tablets. The German police emphasized that the operation targets not only the operators of Crimemarket but also its users. 

The investigation is ongoing, indicating a commitment to identifying and prosecuting all individuals associated with the cybercrime market. Earlier reports of accessibility issues on Crimemarket raised suspicions, with users speculating on technical glitches or potential law enforcement intervention. 

The police announcement now confirms that the intermittent outages were indeed a result of the coordinated law enforcement action and not due to technical issues. While the site's homepage remains accessible at the time of writing, attempts to navigate to other pages on the domain display a seizure notice. 

The notice explains that the police monitored the platform over an extended period as part of a Europe-wide coordinated operation, leading to the confiscation of data. Surprisingly, the forum space where sellers connect with buyers was active until recently, indicating that law enforcement may have opted to allow cyber criminals to continue using the platform post-confiscation. This strategic move could be aimed at gathering additional evidence, including identifying data, login credentials, and other incriminating information from users. 

The takedown of Crimemarket is a significant victory in the ongoing fight against cybercrime, showcasing the effectiveness of international collaboration and meticulous investigative efforts. As the investigation unfolds, it is expected to shed light on the intricate workings of such illicit platforms and contribute to strategies aimed at preventing their resurgence.

ChipMixer: Cryptocurrency Mixer Taken Down After ‘Laundering $3bn in Cryptocurrency’


Darknet cryptocurrency mixer, ChipMixer has been shut down as a result of a sting conducted by Europol, the FBI, and German police, which investigated servers, and internet domains and seized $46 million worth of cryptocurrency. 

During the raid, it was discovered that wallets connected to North Korean cybercriminals and Russian intelligence services had evidence of digital currencies. 

The US criminal prosecutors have booked a Vietnamese man they claim to have run the service since its August 2017 creation. Potentially contaminated funds are gathered by mixers and sent at random to destination wallets. 

Minh Quoc Nguyen, 49, of Hanoi has been accused of money laundering, operating an unlicensed money-transmitting business, and identity theft. The FBI has included him on the wanted criminal list. 

Criminals laundering more than $700 million in bitcoin from wallets identified as stolen funds, including money taken by North Korean hackers from Axie Infinity's Ronin Bridge and Harmony's Horizon Bridge, were among the service's customers. 

It has also been reported that APT28, the Russian military intelligence, and Fancy Bear also utilized ChipMixer in order to buy infrastructure used from Kremlin Drovorub malware. Moreover, according to Europol, the Russian RaaS group LockBit was also a patron. 

ChipMixer joins a relatively small group of crypto mixers that have been shut down or approved, enabling criminals to conceal the source of the cryptocurrency obtained illegally. The list presently includes Blender.io, which was probably renamed and relaunched as Sinbad, and Tornado Cash, a favorite of cybercriminals that helped hackers launder more than $7 billion between 2019 and 2022. 

The Federal Criminal Police Office of Germany seized two ChipMixer back-end servers and more than $46 million in cryptocurrencies, while American investigators seized two web domains that pointed to the company. 

According to court documents, ChipMixer has enabled customers to deposit Bitcoin, which would then be mixed with other users’ Bitcoin in order to anonymize the currency. 

Court records state that ChipMixer allowed users to deposit Bitcoin, which was then combined with Bitcoin from other users to make the currency anonymous. But, this mixer took things a step further by converting the deposited money into tiny tokens with an equal value called "chips," which were then combined, further anonymizing the currencies and obscuring the blockchain trails of the funds. This feature of the platform is what attracted so many criminals. 

The domain now displays a seizure notice, stating: “This domain has been seized by the FBI in accordance with a seizure warrant.” 

“Together, with our international partners, we are firmly committed to identifying and investigating cybercriminals who pose a serious threat to our economic security by laundering billions of dollars’ worth of cryptocurrency under the misguided anonymity of the darknet,” adds Scott Brown, special agent in charge of Homeland Securities Investigations (HSI) Arizona.