Good day everyone,
I hope you are all having a good day, welcome to CryptoGod-1's blog on all things crypto. In this post I will be looking at the news an operation which led to 145 darknet domains which were linked to BidenCash being seized.
145 Darknet Domains Linked to BidenCash Seized
A recent international operation saw United States law enforcement seize about 145 darknet domains associated with BidenCash, the infamous dark web marketplace which has been accused of selling over 15 million stolen credit cards and personal data. BidenCash generated over $17 million in revenue during its operations , which began back in 2022. The marketplace is also known to have sold compromised credentials that could be used to access computers without authorization.
The domain of BidenCash now carries an official notice which states that the domain has been seized by the United States law enforcement. The United States Secret Service (USSS) and the Federal Bureau of Investigation (FBI) led this operation. These agencies were also supported in the operation by the Dutch National Police (Politie), the nonprofit security organisation, The Shadowserver Foundation and Searchlight Cyber.
When operational, BidenCash administrators “charged a fee” for each transaction, while enabling over 117,000 customers to buy stolen credit cards. During the time of October 2022 and February 2023 the BidenCash marketplace published 3.3 million individual stolen credit cards for free to promote the use of their services, according to the DOJ.
The illicit carding marketplace was launched to fill the void left by the shutdown of Joker's Stash, which had been closed a year earlier. Of the 2.1 million compromised credit cards released in February 2023, 50% of the cards belonged to U.S.-based people or entities. In a report published in May 2023, CloudSEK revealed that BidenCash had begun to offer to advertise SSH services to buyers for as low as $2. They also offered a package which included services to check the target server for the presence of shell, as well as information about its processing power, location, and security vulnerabilities, if any. CloudSEK stated:
"This poses a significant risk as threat actors can leverage this power to conduct a wide range of malicious activities, such as data exfiltration, brute force and ransomware attacks, and cryptocurrency mining."
The development comes days after a multinational law enforcement operation which confiscated the four domains that offered counter-antivirus (CAV) and crypting services to threat actors. This helped to ensure their malicious software stayed undetected from security software. The United States authorities have been working on a growing list of dark web enforcement actions, targeting criminal networks that involves crypto.
Back in May Europol successfully carried out Operation RapTor as part of a cooperation effort with law enforcement agencies from 10 countries. It targeted dark web fentanyl sales, arresting hundreds involved in illicit transactions involving crypto. The DOJ also managed to seize more than $24 million in crypto from a Russian national accused of developing and operating the Qakbot malware.
https://x.com/FBI/status/1930354240888713324
Have a great day.
Peace. CryptoGod-1.
Referral Links and Follow Me:
