31 People Arrested in Global Cybercrime Crackdown

Meta confirms WhatsApp is down worldwide

WhatsApp, the globally renowned messaging app, unexpectedly went offline today, leaving its vast user base unable to send or receive messages. […]   Read More 

BleepingComputer 

U.K. Citizen Charged for Hacking into Computer Systems of U.S. Companies

The Securities and Exchange Commission (SEC) announced charges against Robert B. Westbrook, a U.K. citizen, for allegedly hacking into the computer systems of five U.S. public companies.

The SEC claims that Westbrook used this unauthorized access to obtain material nonpublic information about the companies’ earnings, resulting in approximately $3.75 million in illicit profits.

Details of the Allegations

According to the SEC’s complaint, filed on September 27, 2024, in the U.S. District Court for the District of New Jersey, Westbrook’s hacking activities spanned from January 2019 to August 2020.

He reportedly gained access to the companies’ systems by resetting passwords of senior executives’ accounts. This breach allowed him to trade securities based on insider information before at least 14 public earnings announcements.

The SEC has charged Westbrook with violating the antifraud provisions of the Securities Exchange Act of 1934. The complaint seeks civil penalties, the return of ill-gotten gains with interest, and an injunction against future violations of federal securities laws.

SEC’s Advanced Investigative Techniques

Jorge G. Tenreiro, Acting Chief of the SEC’s Crypto Assets and Cyber Unit, emphasized the agency’s commitment to combating cyber fraud.

“As this case demonstrates, even though Westbrook took multiple steps to conceal his identity – including using anonymous email accounts, VPN services, and utilizing bitcoin – the Commission’s advanced data analytics, crypto asset tracing, and technology can uncover fraud even in cases involving sophisticated international hacking,” Tenreiro stated.

The investigation involved a coordinated effort by various SEC units and staff members, employing cutting-edge forensic techniques to trace Westbrook’s activities despite his attempts at anonymity.

Parallel Criminal Charges

In conjunction with the SEC’s civil charges, the U.S. Attorney’s Office for the District of New Jersey has announced criminal charges against Westbrook.

This parallel action underscores the seriousness of the allegations and highlights ongoing efforts by U.S. authorities to address international cybercrime. 

The investigation is being conducted by a team from the SEC’s New York Regional Office and Market Abuse Unit, with substantial assistance from IT Forensics staff and economic analysts.

The SEC also acknowledged support from the Financial Industry Regulatory Authority and the United Kingdom Financial Conduct Authority.

The post U.K. Citizen Charged for Hacking into Computer Systems of U.S. Companies appeared first on Cyber Security News.

 Read More 

Developer Of Hive RAT Arrested By Authorities for Stealing Login Credentials

[[{“value”:”

A San Fernando Valley man has been taken into custody by federal authorities on criminal charges related to a purported scheme to sell and distribute Hive remote access trojan (RAT).  

This gave buyers control over the victims’ computers and allowed them to view the victims’ login credentials, private messages, and other personal data.

The 24-year-old Van Nuys resident Edmond Chakhmakhchyan, also known by his screen name “Corruption,” was taken into custody on Wednesday. The Australian Federal Police (AFP) and the FBI collaborated on this cooperative law enforcement operation.

About four years ago, Chakhmakhchyan allegedly started working with the person who created the Hive RAT, also known as “Firebird.” 

The author advertised the RAT’s many features, specifically its ability to remotely access victim computers and intercept data and communications without the victim’s knowledge.

The FireBird RAT is highly functional malware with various capabilities. Cybercriminals may be able to get user-level access over a targeted machine. 

This malicious malware can manage the Windows Registry, which holds data, settings, and other items related to installed hardware and software. As a result, it may issue commands to manage connected hardware and install and remove apps.

Promoting the Hive Remote Access Trojan (RAT) on the “Hack Forums”

According to the indictment, Chakhmakhchyan and the creator of the malware allegedly came to an agreement whereby Chakhmakhchyan would promote the Hive remote access trojan (RAT) on the “Hack Forums” website, take Bitcoin payments for licenses to use the RAT and offer customer support to those who bought the licenses.

Document

Stop Advanced Phishing Attack With AI

AI-Powered Protection for Business Email Security

Trustifi’s Advanced threat protection prevents the widest spectrum of sophisticated attacks before they reach a user’s mailbox. Stopping 99% of phishing attacks missed by
other email security solutions. .

Try Free Demo

In particular, the malware buyers would transfer Hive RAT to secured systems and obtain unauthorized access to these systems. 

From there, the RAT buyer may close or disable applications, peruse files, log keystrokes, access incoming and outgoing communications, and obtain victim passwords and other login credentials for cryptocurrency wallets and bank accounts, all without the victims’ knowledge or consent.

As per the indictment, Chakhmakhchyan emailed buyers after promoting the Hive RAT. 

He clarified to one of the buyers that the malware let “the Hive RAT user access another person’s computer without that person knowing about the access.” 

Chakhmakhchyan agreed to sell the Hive RAT after the buyer informed him that the victim had project files valued at over $5,000 and $20,000 in Bitcoin kept in a blockchain wallet. It is said that Chakhmakhchyan also sold a license for the Hive RAT to a law enforcement agency undercover agent.

Chakhmakhchyan is Accused Of Conspiracy

 “The indictment specifically charges Chakhmakhchyan with one count of conspiracy – to advertise a device as an interception device, to transmit a code to intentionally cause damage to a protected computer, and to intentionally access a computer to obtain information – as well as one count of advertising a device as an interception device”, the U. S Department of Justice.

The maximum statutory penalty for each count is five years in federal prison.

The defendant is deemed innocent unless and until they are proven guilty beyond a reasonable doubt in a court of law, and an indictment is only an allegation.

The Commonwealth Director of Public Prosecutions will handle the prosecution of an Australian national who has been charged by the Australian Federal Police with involvement in the development and selling of the malware.

Secure your emails in a heartbeat! To find your ideal email security vendor, Take a Free 30-Second Assessment.

The post Developer Of Hive RAT Arrested By Authorities for Stealing Login Credentials appeared first on Cyber Security News.

“}]]   Read More 

Cyber Security News