External links
- List of those indicted
- Statement issued by the United States Department of Justice on Wednesday, February 7, 2018
- U.S. District Court in the District of Nevada case
| Formation | October 2010 |
|---|---|
| Dissolved | February 2018 |
| Type | Criminal organization |
| Location |
|
| Services | Carding |
| Membership | 10,901 |
CEO | Proibz |
Infraud Organization was an international cybercrime network active from October 2010 to February 2018, specializing in carding, identity theft, and stealing financial data, including credit card and online banking information. [1] The organization was created by Svyatoslav Bondarenko, a 34-year-old man from Ukraine.
In February 2018, authorities in the United States indicted 36 individuals involved with the organization on charges of racketeering, conspiracy, possession of 15 or more access devices, and aiding and abetting. [2] As of February 2018, 13 of the 36 have been arrested.
The US Justice Department stated that as of March 2017, the organization had 10,901 registered members [1] and was the "largest cyber fraud enterprise prosecutions ever undertaken by the Department of Justice" and had resulted in $530 million in actual losses, with an estimated $2.2 billion in intended losses. Infraud's actions affected people from 50 countries around the globe, they've targeted more than 4.3 mln debit cards. [3] [4] As of 2018 , the case was the largest cyberfraud ever prosecuted by the US Department of Justice. [2]
Infraud was established by Svyatoslav Bondarenko in October 2010, a 34-year-old man from Ukraine. [1] The name of the organization refers to its slogan, "In Fraud We Trust". By 2018, Infraud became the Dark web's largest group of cybercriminals. [5] Infraud's website was a place where vendors could advertise stolen or counterfeit credit cards, banking information, malware, etc. Among the earliest and most prominent vendors was Muhammad Shiraz, who initially offered extensive dumps of compromised credit card data. [4] [2]
Infraud also provided escrow services to facilitate illicit digital currency transactions. [2] [6]
The organisation had a strict set of rules of conduct for its members. As mentioned in the indictment, in 2011 Bondarenko opened a thread to document users who were banned on Infraud for low quality offers. Infraud relied on screening protocols to ensure only high quality vendors. In March 2011, Bondarenko prohibited buying and selling payment cards and other goods stolen from CIS citizens. [7] [8]
As claimed by one of the members, already in 2011 he possessed 795,000 UK logins to HSBC bank available for sale. Another one advertised 1,300 compromised PayPal account IDs in 2013. Apart from cards and banking credentials, the vendors offered flight bookings, rental cars and seats at US concerts and sporting events for a price much lower than the real one. [7] [8]
On 16 April 2016, Medvedev announced that Bondarenko had gone missing and that he took over as "admin and owner" of the Infraud Organization. Soon, Medvedev introduced an open invite policy that allowed members to invite their associates to Infraud. [7] [8]
Infraud had a well-defined hierarchy, resembling that of large financial corporations. At the top were administrators, followed by super moderators, moderators, vendors, VIP members, and general members. Administrators functioned as executive managers, overseeing daily operations and strategic planning. They controlled membership, imposed penalties and rewards, and had full access to the servers hosting Infraud's websites. [2]
Super moderators managed specific sections of the forums based on their expertise or geographical location. Their authority was limited to editing and deleting posts, resolving disputes, and reviewing products or services offered by vendors within their domain. Moderators performed similar functions but had less authority and were usually responsible for just one or two sub-forums. [2]
Vendors sold illicit goods and services through their dedicated websites. To maintain quality, members reviewed purchases, ensuring that substandard vendors were eventually excluded from the organization. [2]
VIP members held a privileged status, granted to long-standing or influential figures within Infraud to distinguish them from regular members and vendors. [2]
General members used the platform to exchange information on criminal activities and to purchase illegal products and services, including stolen credit card data. [2]
As of March 2017, Infraud had over 10,901 registered members. [2]
The indictment was released on 7 February 2018 by the U.S. District Court in the District of Nevada. It listed 36 individuals who were alleged to be involved with the organization: [2] [8] [9] The indictment contains a list of each individual's name and their alias used within the Infraud organization, a brief explanation of their part in Infraud and examples of some of the crimes each individual committed. The charges in the indictment are only allegations, and are presumed innocent until proven guilty. In short, notable members were: [2]
Additionally, eight unidentified or deceased individuals, referred to as John Doe in the indictment, [2] were listed:
According to the indictment, many vendors redirected potential buyers to their own websites to complete transactions. Each of these websites was listed in the indictment. Some vendors also distributed free credit card dumps or compromised PayPal logins as promotional samples to demonstrate their products.
In a joint operation involving law enforcement agencies from 16 countries, including the United States, Europe, Australia and Asia, 13 members of Infraud were arrested between February 7–8, 2018, in various locations worldwide. The Infraud website was taken down, replaced with a message stating: "This operation is a coordinated effort by United States, European, Australian and Asian law enforcement agencies to disrupt and dismantle the transnational criminal enterprise known as Infraud Organization". [4]
The individuals arrested included Sergey Medvedev (detained in Thailand), Roland Patrick N'Djimbi Tchikaya, Miroslav Kovacevic, Fredrick Thomas, Besart Hoxha, John Telusma, Jose Gamboa, David Jonathan Vargas, Liridon Musliu, Gennaro Fioretti (also arrested in Thailand), Edgar Andres Viloria Rojas, Pius Sushil Wilson, and Edward Lavoile. [14] [18]
Acting Assistant Attorney General John Cronan of the United States Department of Justice described Infraud as operating "like a business to facilitate cyber fraud on a global scale." He emphasized that the Department of Justice "refuses to allow these cybercriminals to use the perceived anonymity of the Internet as a shield for their crimes" and reaffirmed their commitment to working with international partners to identify, investigate, and prosecute those responsible, regardless of their location. Acting Executive Associate Director Benner of Homeland Security Investigations warned that "criminal cyber organizations like Infraud threaten not just U.S. citizens but people in every corner of the globe" and that "the actions of computer hackers and identity thieves not only harm countless innocent Americans, but the threat they pose to our financial system and global commerce cannot be overstated". [2]
In January 2022, the FSB arrested Andrey Novak along with three other Infraud members: Kirill Samokutyaev, Konstantin Bergman, and Mark Bergman. The operation was conducted with assistance from U.S. intelligence agencies, which had been pursuing Novak on cyber fraud charges. A case was filed against him under Part 2 of Article 272 of the Russian Criminal Code (illegal access to computer information). The Tverskoy Court of Moscow subsequently ordered Novak to be held in pre-trial detention. [19] [20] [21]
Infraud was accused of causing over $530 million in actual financial losses and $2.2 billion in intended losses since its inception in 2010. The organization was responsible for the sale of 4 million compromised credit card credentials. [6] [2]
On March 19, 2021, Sergey Medvedev, 34, pleaded guilty to one count of racketeering conspiracy and was sentenced to 10 years in prison. [20] On the same day, Marko Leopard also pleaded guilty and received a 5-year prison sentence. [17] A month later, on November 17, 2021, Valerian Chiochiu, 32, pleaded guilty. In December 2021, he was sentenced to 10 years in prison. [22] [13] Arnaldo Sanchez Torteya, 35, Edgar Rojas, 31, and Jose Gamboa, 35, were sentenced to 8 years in prison. Pius Sushil Wilson, 35, received 7 years. [23]
In May 2021, Anthony Nnamdi Okeakpu pleaded guilty. By July 2021, he was sentenced to 48 months (4 years) in prison, 3 years of supervised release with special conditions, and a $568 million fine. [24] [25]
The 14th member of Infraud to be sentenced was John Telusma, who pleaded guilty on October 13, 2021, and was sentenced to 4 years in prison on May 22, 2022. [15]
On September 9, 2022, Besart Hoxha was extradited from Kosovo and placed into custody. As of July 2023, his case remains under pre-plea investigation. [26]
Fredrick Thomas was arrested on 28 July 2023. [27]