Sunday, February 23, 2025
Homecyber securityAuthorities Seized Ghost Communication Platform Used by Cyber Criminals

Authorities Seized Ghost Communication Platform Used by Cyber Criminals

Published on

SIEM as a Service

Follow Us on Google News

Authorities have successfully dismantled “Ghost,” an encrypted communication platform allegedly used by cybercriminals worldwide.

The operation, led by the Australian Federal Police (AFP) and involving international law enforcement agencies, marks a major victory in the ongoing battle against transnational crime networks.

Operation Kraken

The takedown of Ghost was part of “Operation Kraken,” a meticulously planned operation involving law enforcement agencies from nine countries, including Australia, Canada, Ireland, Italy, Sweden, and more.

The operation was coordinated by Europol and supported by the FBI and the French Gendarmerie.

Over two days of intense action across four Australian states and territories, approximately 700 AFP members executed search warrants and provided support to apprehend those involved with Ghost. 

The platform was allegedly created by a 32-year-old man from New South Wales, who has now been charged with multiple offenses.

Authorities claim that Ghost was specifically designed for the criminal underworld, facilitating activities such as drug trafficking, money laundering, and even orchestrating violent crimes.

The AFP’s ability to infiltrate and decrypt messages on Ghost was pivotal in preventing 50 threats to life in Australia.

Decoding Compliance: What CISOs Need to Know – Join Free Webinar

Arrests and Seizures

The operation has resulted in 38 arrests and the execution of 71 search warrants. In addition to these arrests, authorities have seized significant quantities of illicit drugs and firearms.

The AFP-led Criminal Assets Confiscation Taskforce has also obtained restraining orders over suspected criminal assets, including cryptocurrencies and bank accounts. 

The alleged mastermind behind Ghost is facing serious charges in court, including supporting a criminal organization and dealing with the proceeds of crime.

The charges carry substantial penalties, reflecting the severity of the crimes facilitated by the platform. Authorities allege that the administrator used a network of resellers to distribute specialized handsets globally.

These modified smartphones were sold for approximately $2,350 each, providing access to the encrypted network.

The success of Operation Kraken underscores the importance of international cooperation in combating organized crime.

Law enforcement agencies from different countries collaborated closely, sharing intelligence and resources to dismantle Ghost.

This operation follows similar successful takedowns of other encrypted platforms like EncroChat and Sky Global. 

Europol Executive Director Catherine De Bolle emphasized that no criminal network can evade the collective efforts of global law enforcement.

The operation demonstrates how collaboration can lead to concrete results in tackling organized crime.

As technology continues to evolve, law enforcement agencies are adapting their strategies to counteract criminal activities effectively. 

The dismantling of Ghost sends a clear message: no matter how sophisticated or hidden criminal networks believe they are, they cannot escape the reach of coordinated global law enforcement efforts.

Are You From SOC/DFIR Teams? - Try Advanced Malware and Phishing Analysis With ANY.RUN - 14-day free trial

Divya
Divya
Divya is a Senior Journalist at GBhackers covering Cyber Attacks, Threats, Breaches, Vulnerabilities and other happenings in the cyber world.

Latest articles

New Zhong Stealer Malware Exploit Zendesk to Attack Fintech and Cryptocurrency

A newly identified malware, dubbed Zhong Stealer, has emerged as a significant threat to...

SPAWNCHIMERA Malware Exploits Ivanti Buffer Overflow Vulnerability by Applying a Critical Fix

In a recent development, the SPAWNCHIMERA malware family has been identified exploiting the buffer...

Sitevision Auto-Generated Password Vulnerability Lets Hackers Steal Signing Key

A significant vulnerability in Sitevision CMS, versions 10.3.1 and earlier, has been identified, allowing...

NSA Allegedly Hacked Northwestern Polytechnical University, China Claims

Chinese cybersecurity entities have accused the U.S. National Security Agency (NSA) of orchestrating a...

Supply Chain Attack Prevention

Free Webinar - Supply Chain Attack Prevention

Recent attacks like Polyfill[.]io show how compromised third-party components become backdoors for hackers. PCI DSS 4.0’s Requirement 6.4.3 mandates stricter browser script controls, while Requirement 12.8 focuses on securing third-party providers.

Join Vivekanand Gopalan (VP of Products – Indusface) and Phani Deepak Akella (VP of Marketing – Indusface) as they break down these compliance requirements and share strategies to protect your applications from supply chain attacks.

Discussion points

Meeting PCI DSS 4.0 mandates.
Blocking malicious components and unauthorized JavaScript execution.
PIdentifying attack surfaces from third-party dependencies.
Preventing man-in-the-browser attacks with proactive monitoring.

More like this

New Zhong Stealer Malware Exploit Zendesk to Attack Fintech and Cryptocurrency

A newly identified malware, dubbed Zhong Stealer, has emerged as a significant threat to...

SPAWNCHIMERA Malware Exploits Ivanti Buffer Overflow Vulnerability by Applying a Critical Fix

In a recent development, the SPAWNCHIMERA malware family has been identified exploiting the buffer...

Sitevision Auto-Generated Password Vulnerability Lets Hackers Steal Signing Key

A significant vulnerability in Sitevision CMS, versions 10.3.1 and earlier, has been identified, allowing...