Wednesday, January 29, 2025
HomeCyber Crime18 International Hackers who Steal Tens of Millions of Dollars Arrested For...

18 International Hackers who Steal Tens of Millions of Dollars Arrested For ATM Skimming Attack

Published on

SIEM as a Service

Follow Us on Google News

U.S law enforcement agencies arrested 18 International Fraud members who were allegedly committed with the various cyber crimes and stolen tens of millions of dollars from financial institutions and individual victims.

Geoffrey S. Berman, the United States Attorney from Newyork unsealing of indictments against the 18 members who have committed with a variety of crimes, including access device fraud, wire fraud, bank fraud, and aggravated identity theft.

These hackers were involved with wide-ranging international ATM skimming and money laundering operation and have stolen more than $20 Million through hundreds of ATM skimming operations across the U.S including 17 different states.

DefendantAgePlace of ResidenceNationality
FLORIAN CLAUDIU MARTIN,a/k/a “Florin Claudiu,”a/k/a “Johnny Ion,”a/k/a “Jane Hotul,”a/k/a “Petru Andrioaie,”a/k/a “Petru Andrioane,”44Cabo San Lucas, MexicoRomania
ALEX DONATI51Cabo San Lucas, MexicoRomania
RAUL IONUT VIDRASAN,a/k/a “Michu,” a/k/a “The Boy”27Perugia, ItalyRomania
MIRCEA CONSTANTINESCU, a/k/a “Sobo”44Cooper City, FloridaRomania
NIKOLAOS LIMBERATOS, a/k/a “Nicu Limberto”53Deer Park, New YorkGreece
CRISTIAN COSTEA, a/k/a “Momo”44Queens, New YorkRomania
ALIN HANES CALUGARU39Sunny Isles, FloridaRomania
IONELA CONSTANTINESCU, a/k/a “Pitica”35Cooper City, FloridaRomania
THEOFRASTOS LYMBERATOS36Queens, New YorkUnited States
ANDREW ELIOPOULOS34Queens, New YorkUnited States
VALENTIN PETRESCU, a/k/a “Gico Cosmin Giscan,” a/k/a “Zoltan Pruma”32Russellville, ArkansasRomania
PETER SAMOLIS30Queens, New YorkUnited States
KELLY KARKI LAM42New York, New YorkUnited States
GEORGE SERBAN32Miami, FloridaRomania
DRAGOS DIACONU41Nashville, TennesseeRomania
MADLIN ALEXANDRU ANCA, a/k/a “Mateo Fernandez Alejandro”22Nashville, TennesseeRomania
CRISTIAN ULMANU, a/k/a “Boris Moravec”54Russellville, ArkansasRomania
IULIANA MIHAILESCU42Queens, New YorkRomania

They were installing the skimming devices on ATMs, removing those devices, and cashing out large numbers of fraudulent debit cards manufactured and the defendants worked directly in this skimming attack.

Skimming devices and component parts were imported from different countries and deployed in ATMs to record the debit card numbers and personal identification numbers when the victims enter their details, and then used those cards to fraudulently withdraw cash from victims’ bank accounts.

“Other defendants assisted in engineering the skimming devices that the Skimming Organization used.  Still, other defendants laundered the proceeds of the skimming attacks through bank accounts, properties, businesses, and the transportation of bulk cash.”

According to Department of Justice ” if they found guilty then Each defendant will be charged with one count of conspiracy to commit access device fraud, which carries a maximum sentence of 7 ½ years in prison; one count of conspiracy to commit wire and bank fraud, which carries a maximum sentence of 30 years in prison; and one count of aggravated identity theft, which carries a mandatory sentence of two years in prison, consecutive to any other sentence imposed.  “

NYPD Commissioner James P. O’Neill said:  “The NYPD and its law enforcement partners are committed to dismantling criminal enterprises that leverage attacks against our cyberinfrastructure.  We comprehensively confront everything from highly-sophisticated transnational groups, like this one, to those criminals who exploit our citizens with cyber-enabled scams.

All the members were arrested with the help of FBI, CBP, and the NYPD,  INTERPOL-Rome, INTERPOL-Mexico City.

You can follow us on LinkedinTwitterFacebook for daily Cybersecurity and hacking news updates

Balaji
Balaji
BALAJI is an Ex-Security Researcher (Threat Research Labs) at Comodo Cybersecurity. Editor-in-Chief & Co-Founder - Cyber Security News & GBHackers On Security.

Latest articles

Vulnerability in Airline Integration Service enables A Hacker to Gain Entry To User Accounts

A recent security vulnerability in a widely used airline integration service has exposed millions...

Hackers Seize Control of 3,000 Companies Through Critical Vulnerabilities

In a groundbreaking cybersecurity investigation, researchers identified several critical vulnerabilities in a target system,...

PoC Exploit Released for Critical Cacti Vulnerability Let Attackers Code Remotely

A critical vulnerability in the Cacti performance monitoring framework tracked as CVE-2025-22604, has been...

TorNet Backdoor Exploits Windows Scheduled Tasks to Deploy Malware

Cisco Talos researchers have identified an ongoing cyber campaign, active since mid-2024, deploying a...

API Security Webinar

Free Webinar - DevSecOps Hacks

By embedding security into your CI/CD workflows, you can shift left, streamline your DevSecOps processes, and release secure applications faster—all while saving time and resources.

In this webinar, join Phani Deepak Akella ( VP of Marketing ) and Karthik Krishnamoorthy (CTO), Indusface as they explores best practices for integrating application security into your CI/CD workflows using tools like Jenkins and Jira.

Discussion points

Automate security scans as part of the CI/CD pipeline.
Get real-time, actionable insights into vulnerabilities.
Prioritize and track fixes directly in Jira, enhancing collaboration.
Reduce risks and costs by addressing vulnerabilities pre-production.

More like this

Salt Typhoon Hacked Nine U.S. Telecoms, Tactics and Techniques Revealed

Salt Typhoon, a state-sponsored Advanced Persistent Threat (APT) group linked to the People's Republic...

FlowerStorm PaaS Platform Attacking Microsoft Users With Fake Login Pages

Rockstar2FA is a PaaS kit that mimics the legitimate credential-request behavior of cloud/SaaS platforms....

Hackers Using YouTube Links and Microsoft 365 Themes to Steal Logins

Cybercriminals are executing sophisticated phishing attacks targeting Microsoft 365 users by employing deceptive URLs...