Mastermind behind €1 billion cyber bank robbery arrested in Spain
Spain and Europol on Monday announced the arrest of a Ukrainian man dubbed the mastermind of a gang behind hundreds of cyberattacks that have netted around a billion euros from banks.
The man, detained in the eastern coastal city of Alicante, carried out attacks using malware such as "Carbanak" and "Cobalt," according to Europol, which hailed cooperation with Spanish financial police as well as the FBI, Romanian, Belarusian and Taiwanese authorities and private cyber security firms.
El líder de una organización #cibercriminal que robó más de 1.000 millones de dólares de bancos de todo el mundo con ataques informáticos ha sido detenido en Alicante en una operación de la @policia con el apoyo de @Europol, @INTERPOL_HQ y @FBI. pic.twitter.com/XozX00sIzZ
— Juan Ignacio Zoido (@zoidoJI) March 26, 2018
From 2013, when it launched the Anunak malware programme, the gang attacked banks, e-payment systems and financial institutions in more than 40 countries, resulting "in cumulative losses of over EUR 1 billion for the financial industry," Europol said.
"The Cobalt malware alone allowed criminals to steal up to €10 million per heist," the pan-European police body added.
Criminals sent phishing mails to bank employees with attachments purported to come from legitimate firms.
Once the malicious software had been downloaded it would allow the criminals to control infected computers remotely and gain access to the internal banking network as well as servers controlling ATM cashpoints from where "money mules" would collect the cash.
Some profits from the heists were laundered via cryptocurrencies, using prepaid cards linked to cryptocurrency wallets, investigators said.
The Spanish interior ministry named the suspect only as Denis K and said three accomplices "managed to gain access to practically all of Russia's banks and make withdrawals from ATMs in Madrid for half a million euros."
Wim Mijs, chief executive officer of the European Banking Federation, which helped with the investigation, said it "clearly goes beyond raising awareness on cybersecurity and demonstrates the value of our partnership with the cybercrime specialists at Europol.
"Public-private cooperation is essential when it comes to effectively fighting digital cross-border crimes like the one that we are seeing here with the Carbanak gang."
Steven Wilson, head of Europol's European Cybercrime Centre (EC3), lauded "a significant success" against a top level cybercriminal organisation in an operation which "illustrates that cybercriminals can no longer hide behind perceived international anonymity."
Comments
See Also
The man, detained in the eastern coastal city of Alicante, carried out attacks using malware such as "Carbanak" and "Cobalt," according to Europol, which hailed cooperation with Spanish financial police as well as the FBI, Romanian, Belarusian and Taiwanese authorities and private cyber security firms.
El líder de una organización #cibercriminal que robó más de 1.000 millones de dólares de bancos de todo el mundo con ataques informáticos ha sido detenido en Alicante en una operación de la @policia con el apoyo de @Europol, @INTERPOL_HQ y @FBI. pic.twitter.com/XozX00sIzZ
— Juan Ignacio Zoido (@zoidoJI) March 26, 2018
From 2013, when it launched the Anunak malware programme, the gang attacked banks, e-payment systems and financial institutions in more than 40 countries, resulting "in cumulative losses of over EUR 1 billion for the financial industry," Europol said.
"The Cobalt malware alone allowed criminals to steal up to €10 million per heist," the pan-European police body added.
Criminals sent phishing mails to bank employees with attachments purported to come from legitimate firms.
Once the malicious software had been downloaded it would allow the criminals to control infected computers remotely and gain access to the internal banking network as well as servers controlling ATM cashpoints from where "money mules" would collect the cash.
Some profits from the heists were laundered via cryptocurrencies, using prepaid cards linked to cryptocurrency wallets, investigators said.
The Spanish interior ministry named the suspect only as Denis K and said three accomplices "managed to gain access to practically all of Russia's banks and make withdrawals from ATMs in Madrid for half a million euros."
Wim Mijs, chief executive officer of the European Banking Federation, which helped with the investigation, said it "clearly goes beyond raising awareness on cybersecurity and demonstrates the value of our partnership with the cybercrime specialists at Europol.
"Public-private cooperation is essential when it comes to effectively fighting digital cross-border crimes like the one that we are seeing here with the Carbanak gang."
Steven Wilson, head of Europol's European Cybercrime Centre (EC3), lauded "a significant success" against a top level cybercriminal organisation in an operation which "illustrates that cybercriminals can no longer hide behind perceived international anonymity."
Join the conversation in our comments section below. Share your own views and experience and if you have a question or suggestion for our journalists then email us at [email protected].
Please keep comments civil, constructive and on topic – and make sure to read our terms of use before getting involved.
Please log in here to leave a comment.