Sunday, November 24, 2024
HomeCyber AttackTwo Hackers of Bayrob Malware Gang Convicted for Infecting more than 400,000...

Two Hackers of Bayrob Malware Gang Convicted for Infecting more than 400,000 Computers Worldwide

Published on

Two Romanian hackers Bogdan Nicolescu, 36, and Radu Miclaus, 37, belonging to Bayrob group convicted for infecting 400,000 computers around the world with malware and for stealing millions of dollars.

They have been convicted by a federal jury today for 21 counts related to infecting victims computer with malware to exfiltrate the credit card details and sold them in dark web, mining cryptocurrency and for online frauds.

“According to trial and court documents, Nicolescu, Miclaus, and a co-conspirator who pleaded guilty, collectively operated a criminal conspiracy from Bucharest, Romania.”

- Advertisement - SIEM as a Service

They developed the malware in 2007, and then deliver the malware through phishing emails that pose to be from Western Union, Norton AntiVirus and the IRS.

When users open’s the attachment, the malware gets installed to the system and harvest email addresses from the infected computer. The gang controlled 400,000+ botnet for cryptocurrency mining.

By having control over the computer they exfiltrate personal information, credit card information, user names, and passwords. They also disable antivirus software in victims and block law enforcement agencies websites.

The defendants used stolen email credentials to copy a victim’s email contacts. They also activated files that forced infected computers to register email accounts with AOL. The defendants registered more than 100,000 email accounts using this method.

“They then sent malicious emails from these addresses to the compromised contact lists. Through this method, they sent tens of millions of malicious emails,” reads Department of Justice press release.

By having control over the system, if a user visits pages such as Facebook, PayPal, eBay or others they intercept the request and redirect them phishing sites to grab login credentials.

They use to infect fake pages in trusted websites such as eBay to make victims believe that they getting instructions from a legitimate source.

Also, they use to place fraudulent listings for automobiles, motorcycles and other high-priced goods on eBay that delivers malware.

Bayrob group

Symantec has exposed the group, gaining insight into its key players, tactics, malware, and the potential impact and criminal activity undertaken.

“The Bayrob group laundered this money by hiring “money transfer agents” and created fictitious companies with fraudulent websites designed to give the impression they were actual businesses engaged in legitimate financial transactions.”

You can follow us on LinkedinTwitterFacebook for daily Cybersecurity updates also you can take the Best Cybersecurity courses online to keep your self-updated.

Ex-NSA Contractor got jailed for Stealing the Country’s Most Sensitive Classified Secrets Data for 20 years

Leader of the Hacker Group Jailed for Stealing $15 Million from Russian Banks

Gurubaran
Gurubaran
Gurubaran is a co-founder of Cyber Security News and GBHackers On Security. He has 10+ years of experience as a Security Consultant, Editor, and Analyst in cybersecurity, technology, and communications.

Latest articles

Nearest Neighbor Attacks: Russian APT Hack The Target By Exploiting Nearby Wi-Fi Networks

Recent research has revealed that a Russian advanced persistent threat (APT) group, tracked as...

240+ Domains Used By PhaaS Platform ONNX Seized by Microsoft

Microsoft's Digital Crimes Unit (DCU) has disrupted a significant phishing-as-a-service (PhaaS) operation run by...

Russian TAG-110 Hacked 60+ Users With HTML Loaded & Python Backdoor

The Russian threat group TAG-110, linked to BlueDelta (APT28), is actively targeting organizations in...

Earth Kasha Upgraded Their Arsenal With New Tactics To Attack Organizations

Earth Kasha, a threat actor linked to APT10, has expanded its targeting scope to...

Free Webinar

Protect Websites & APIs from Malware Attack

Malware targeting customer-facing websites and API applications poses significant risks, including compliance violations, defacements, and even blacklisting.

Join us for an insightful webinar featuring Vivek Gopalan, VP of Products at Indusface, as he shares effective strategies for safeguarding websites and APIs against malware.

Discussion points

Scan DOM, internal links, and JavaScript libraries for hidden malware.
Detect website defacements in real time.
Protect your brand by monitoring for potential blacklisting.
Prevent malware from infiltrating your server and cloud infrastructure.

More like this

Nearest Neighbor Attacks: Russian APT Hack The Target By Exploiting Nearby Wi-Fi Networks

Recent research has revealed that a Russian advanced persistent threat (APT) group, tracked as...

240+ Domains Used By PhaaS Platform ONNX Seized by Microsoft

Microsoft's Digital Crimes Unit (DCU) has disrupted a significant phishing-as-a-service (PhaaS) operation run by...

Russian TAG-110 Hacked 60+ Users With HTML Loaded & Python Backdoor

The Russian threat group TAG-110, linked to BlueDelta (APT28), is actively targeting organizations in...