4 alleged members of the FIN9 cybercrime gang have been charged in relation to a sequence of hacks that brought on over US $71 million of losses for corporations throughout the US.
The defendants, all Vietnamese nationals, are accused of launching a sequence of refined phishing and supply-chain assaults to realize unauthorised entry to firm networks, with a purpose to steal delicate info.
Because the US Division of Justice describes, Ta Van Tai, aka “Quynh Hoa,” aka “Bich Thuy;” Nguyen Viet Quoc, aka “Tien Nguyen;” Nguyen Trang Xuyen; and Nguyen Van Truong, aka “Chung Nguyen,” are alleged to have hacked companies to steal personal info, worker advantages, and funds between at the least Could 2018 via to October 2021.
Based on courtroom paperwork, the indicted people accessed worker profit rewards packages maintained by companies and re-directed reward playing cards to accounts underneath their very own management.
The FIN9 group can be accused of stealing reward card info saved on the pc networks of hacked corporations, concealing their true identities utilizing stolen info to register accounts at cryptocurrency exchanges and internet server internet hosting companies.
“The FIN9 defendants have been prolific worldwide hackers who, for years, allegedly used phishing campaigns, provide chain assaults and different hacking strategies to steal thousands and thousands from their victims,” mentioned US Legal professional Philip R. Sellinger. “They did all of this whereas hiding behind keyboards, VPNs, and pretend identities, and even then, the Division of Justice discovered them. My workplace stays dedicated to its pursuit of justice for victims, and cybercriminals in all places ought to take discover.”
Tai, Xuyen, and Truong are mentioned to have bought stolen reward playing cards on a peer-to-peer cryptocurrency market in an try to hide the origin of the stolen cash.
All 4 defendants face expenses of conspiracy to commit fraud, extortion, wire fraud, and intentional harm to a protected laptop, and will resist 5 years in jail for fraud and extortion, as much as 20 years for wire fraud, and as much as 10 years for every depend of laptop harm.
As well as, Tai, Xuyen, and Truong additionally face cash laundering expenses with a most 20-year sentence. Tai and Quoc are moreover charged with aggravated id theft and conspiracy to commit id fraud, carrying a compulsory two yr sentence and as much as 15 years respectively.
The concentrate on reward playing cards by the alleged hackers attracts comparability with one other cybercriminal gang, Storm-0539 (also called Atlas Lion), which has been very energetic just lately. Final month, the FBI issued a warning to US retailers about how the Storm-0539 cybercrime group was focusing on firm staff by way of phishing assaults in an try to entry techniques that might generate fraudulent reward playing cards.
