4 alleged members of the FIN9 cybercrime gang have been charged in relation to a sequence of hacks that prompted over US $71 million of losses for firms throughout the USA.
The defendants, all Vietnamese nationals, are accused of launching a sequence of subtle phishing and supply-chain assaults to achieve unauthorised entry to firm networks, to be able to steal delicate data.
Because the US Division of Justice describes, Ta Van Tai, aka “Quynh Hoa,” aka “Bich Thuy;” Nguyen Viet Quoc, aka “Tien Nguyen;” Nguyen Trang Xuyen; and Nguyen Van Truong, aka “Chung Nguyen,” are alleged to have hacked companies to steal private data, worker advantages, and funds between no less than Could 2018 by means of to October 2021.
In accordance with court docket paperwork, the indicted people accessed worker profit rewards applications maintained by companies and re-directed present playing cards to accounts beneath their very own management.
The FIN9 group can be accused of stealing present card data saved on the pc networks of hacked firms, concealing their true identities utilizing stolen data to register accounts at cryptocurrency exchanges and net server internet hosting corporations.
“The FIN9 defendants had been prolific worldwide hackers who, for years, allegedly used phishing campaigns, provide chain assaults and different hacking strategies to steal tens of millions from their victims,” mentioned US Legal professional Philip R. Sellinger. “They did all of this whereas hiding behind keyboards, VPNs, and faux identities, and even then, the Division of Justice discovered them. My workplace stays dedicated to its pursuit of justice for victims, and cybercriminals in all places ought to take discover.”
Tai, Xuyen, and Truong are mentioned to have bought stolen present playing cards on a peer-to-peer cryptocurrency market in an try to hide the origin of the stolen cash.
All 4 defendants face prices of conspiracy to commit fraud, extortion, wire fraud, and intentional injury to a protected pc, and will resist 5 years in jail for fraud and extortion, as much as 20 years for wire fraud, and as much as 10 years for every rely of pc injury.
As well as, Tai, Xuyen, and Truong additionally face cash laundering prices with a most 20-year sentence. Tai and Quoc are moreover charged with aggravated id theft and conspiracy to commit id fraud, carrying a compulsory two yr sentence and as much as 15 years respectively.
The concentrate on present playing cards by the alleged hackers attracts comparability with one other cybercriminal gang, Storm-0539 (also referred to as Atlas Lion), which has been very energetic not too long ago. Final month, the FBI issued a warning to US retailers about how the Storm-0539 cybercrime group was concentrating on firm workers through phishing assaults in an try to entry programs that would generate fraudulent present playing cards.
