DOJ Conducts “Unprecedented Takedown” of Online Criminal Marketplace
One of the world’s largest online marketplaces, used to buy and sell stolen information, was shut down by global law enforcement in what the Department of Justice (DOJ) calls an “unprecedented takedown.”
The DOJ says the coordinated international operation—dubbed “Operation Cookie Monster”—targeted Genesis Market, which is an online criminal marketplace that advertised and sold packages of stolen account data and enabled ransomware attacks.
Law enforcement also seized 11 domain names used to support Genesis Market’s online presence.
“Our seizure of Genesis Market should serve as a warning to cybercriminals who operate or use these criminal marketplaces: the Justice Department and our international partners will shut down your illegal activities, find you, and bring you to justice.,” said U.S. Attorney General Merrick B. Garland.
According to the complaint, Genesis Market offered buyers access to data stolen from over 1.5 million compromised computers around the world, containing over 80 million account access credentials.
That included usernames and passwords for bank accounts, social media, email and more.
Credentials include those connected to the financial sector, critical infrastructure, and federal, state, and local government agencies.
Information could be bought for less than dollar and included “digital fingerprints” which is the set of data that identifies individual users online, allowing the buyer to assume that person’s identity. Some of the stolen data was sold for hundreds of dollars.
The complaint says that Genesis Market was also one of the most prolific initial access brokers (IABs). IABs attract ransomware attackers looking to easily attack a victim’s computer system.
Genesis Market users were located all over the world and the law enforcement action resulted in the arrest of 119 people, 208 property searches, and 97 knock and talk measures.
The FBI and the Dutch National police led the international sweep, along with assistance from 15 other countries, including U.K., France, Italy, Canada, Spain, Germany, Poland, Switzerland, Australia, and New Zealand.
In the U.S., the FBI Milwaukee Field Office led the investigation with assistance from 44 other FBI field offices.
The DOJ also recently dismantled two other internet marketplaces including Hydra Market and BreachForums.
“Each takedown is yet another blow to the cybercrime ecosystem,” said Deputy Attorney General Lisa O. Monaco.