US Justice Department: Cybercrime Forum Impacted 17 Million Americans

International Law Enforcement Disrupts Major Hacking Forums

A collaborative effort by law enforcement agencies from Australia, France, Germany, Greece, Italy, Romania, Spain, and the United States culminated in the dismantling and seizure of two significant hacking forums, alongside two associated cybercriminal services, on Thursday.

Details Released by Europol and the DOJ

Following the unveiling of these takedown operations by Europol and Germany’s Bundeskriminalamt (BKA), the U.S. Department of Justice (DOJ) issued a statement elaborating on the two forums – identified as Cracked and Nulled.

Cracked: A Hub for Cybercriminal Activity

The DOJ reports that since 2018, Cracked amassed over 4 million users. These individuals engaged in the exchange of cybercriminal tools and compromised data, generating approximately $4 million in revenue.

The impact of illicit activities on these forums is substantial, affecting at least 17 million individuals across the United States, according to prosecutors.

One case highlighted by the DOJ involves a New York woman subjected to cyberstalking, sextortion, and harassment. This abuse stemmed from a Cracked product promising access to “billions of leaked websites” and stolen login credentials.

Specifically, a cybercriminal utilized the tool to obtain the victim’s account credentials. Subsequently, they engaged in stalking behavior and sent threatening, sexually explicit messages. The DOJ emphasizes that these seizures aim to curtail such cybercrime and limit the availability of these tools within the cybercriminal community.

Nulled: Another Major Cybercrime Platform

The DOJ also cited a product available on Nulled that purportedly contained the personal information – including names and Social Security numbers – of 500,000 U.S. citizens.

Operating since 2016, Nulled boasted a user base exceeding 5 million and hosted over 43 million posts advertising hacking tools and stolen data. The forum reportedly generated around $1 million in annual revenue.

Administrator Faces Criminal Charges

Lucas Sohn, a 29-year-old Argentinian residing in Spain, has been identified as an “active administrator” of Nulled. He is now facing criminal charges related to various cybercrimes, including the trafficking of passwords and unauthorized access to computer systems.

Potential Penalties

Sohn could face a maximum sentence of five years for conspiracy to traffic in passwords. He also faces up to 10 years for access device fraud and 15 years for identity fraud, as outlined by the DOJ.

The criminal complaint against Lucas Sohn, along with the seizure warrant for Nulled.to, are publicly available.

• Key Takeaway: This international operation represents a significant blow to the cybercriminal ecosystem.
• Impact: Millions of Americans were potentially affected by the data traded on these forums.