Sunday, October 18, 2026

18 International Hackers who Steal Tens of Millions of Dollars Arrested For ATM Skimming Attack

U.S law enforcement agencies arrested 18 International Fraud members who were allegedly committed with the various cyber crimes and stolen tens of millions of dollars from financial institutions and individual victims.

Geoffrey S. Berman, the United States Attorney from Newyork unsealing of indictments against the 18 members who have committed with a variety of crimes, including access device fraud, wire fraud, bank fraud, and aggravated identity theft.

These hackers were involved with wide-ranging international ATM skimming and money laundering operation and have stolen more than $20 Million through hundreds of ATM skimming operations across the U.S including 17 different states.

DefendantAgePlace of ResidenceNationality
FLORIAN CLAUDIU MARTIN,a/k/a “Florin Claudiu,”a/k/a “Johnny Ion,”a/k/a “Jane Hotul,”a/k/a “Petru Andrioaie,”a/k/a “Petru Andrioane,”44Cabo San Lucas, MexicoRomania
ALEX DONATI51Cabo San Lucas, MexicoRomania
RAUL IONUT VIDRASAN,a/k/a “Michu,” a/k/a “The Boy”27Perugia, ItalyRomania
MIRCEA CONSTANTINESCU, a/k/a “Sobo”44Cooper City, FloridaRomania
NIKOLAOS LIMBERATOS, a/k/a “Nicu Limberto”53Deer Park, New YorkGreece
CRISTIAN COSTEA, a/k/a “Momo”44Queens, New YorkRomania
ALIN HANES CALUGARU39Sunny Isles, FloridaRomania
IONELA CONSTANTINESCU, a/k/a “Pitica”35Cooper City, FloridaRomania
THEOFRASTOS LYMBERATOS36Queens, New YorkUnited States
ANDREW ELIOPOULOS34Queens, New YorkUnited States
VALENTIN PETRESCU, a/k/a “Gico Cosmin Giscan,” a/k/a “Zoltan Pruma”32Russellville, ArkansasRomania
PETER SAMOLIS30Queens, New YorkUnited States
KELLY KARKI LAM42New York, New YorkUnited States
GEORGE SERBAN32Miami, FloridaRomania
DRAGOS DIACONU41Nashville, TennesseeRomania
MADLIN ALEXANDRU ANCA, a/k/a “Mateo Fernandez Alejandro”22Nashville, TennesseeRomania
CRISTIAN ULMANU, a/k/a “Boris Moravec”54Russellville, ArkansasRomania
IULIANA MIHAILESCU42Queens, New YorkRomania

They were installing the skimming devices on ATMs, removing those devices, and cashing out large numbers of fraudulent debit cards manufactured and the defendants worked directly in this skimming attack.

Skimming devices and component parts were imported from different countries and deployed in ATMs to record the debit card numbers and personal identification numbers when the victims enter their details, and then used those cards to fraudulently withdraw cash from victims’ bank accounts.

“Other defendants assisted in engineering the skimming devices that the Skimming Organization used.  Still, other defendants laundered the proceeds of the skimming attacks through bank accounts, properties, businesses, and the transportation of bulk cash.”

According to Department of Justice ” if they found guilty then Each defendant will be charged with one count of conspiracy to commit access device fraud, which carries a maximum sentence of 7 ½ years in prison; one count of conspiracy to commit wire and bank fraud, which carries a maximum sentence of 30 years in prison; and one count of aggravated identity theft, which carries a mandatory sentence of two years in prison, consecutive to any other sentence imposed.  “

NYPD Commissioner James P. O’Neill said:  “The NYPD and its law enforcement partners are committed to dismantling criminal enterprises that leverage attacks against our cyberinfrastructure.  We comprehensively confront everything from highly-sophisticated transnational groups, like this one, to those criminals who exploit our citizens with cyber-enabled scams.

All the members were arrested with the help of FBI, CBP, and the NYPD,  INTERPOL-Rome, INTERPOL-Mexico City.

You can follow us on Linkedin, Twitter, Facebook for daily Cybersecurity and hacking news updates

Balaji
Balaji
BALAJI is an Ex-Security Researcher (Threat Research Labs) at Comodo Cybersecurity. Editor-in-Chief & Co-Founder - Cyber Security News & GBHackers On Security.

Hot this week

How To Access Dark Web Anonymously and know its Secretive and Mysterious Activities

What is Deep Web The deep web, invisible web, or...

How to Build and Run a Security Operations Center (SOC Guide) – 2023

Today’s Cyber security operations center (CSOC) should have everything...

Russian Hackers Bypass EDR to Deliver a Weaponized TeamViewer Component

TeamViewer's popularity and remote access capabilities make it an...

Web Server Penetration Testing Checklist – 2026

Web server pentesting is performed under three significant categories: identity,...

ATM Penetration Testing – Advanced Testing Methods to Find The Vulnerabilities

ATM Penetration testing, Hackers have found different approaches to...

Hackers Use ConnectWise SkyKick Credentials to Access Microsoft 365, Halting Cloud Backups

Attackers abused compromised ConnectWise Cloud Backup credentials to access...

Anthropic’s Claude AI Uncovers Origins of NSA-Provided Cryptographic Keys After 25 Years

Anthropic says an internal Claude research model reconstructed how...

OpenBSD Kernel Flaw Dating Back 37 Years Enables Local Privilege Escalation to Root

A newly disclosed OpenBSD kernel exploitation chain combines a...

GhostAction Hackers Hide Credential-Stealing Malware in Fake Font Files Across 94 GitHub Repositories

GhostAction attackers have expanded their GitHub credential theft campaign...

SideCopy Hackers Target Indian Organizations With ReverseRAT Malware to Steal Data

Indian authorities have warned that SideCopy hackers are targeting...

New GhostBat Android Malware Targets 60 Banking and UPI Apps to Steal PINs

A new GhostBat RAT variant targets 60 Android financial...

New ROMULUS Malware Platform Uses Six Servers to Deliver Multiple Malicious Payloads

ROMULUS, a shared ClickFix delivery platform operating across six...

Related Articles

Recent News