A Brazilian man, Junior Barros De Oliveira, has been charged with multiple counts of cybercrime and extortion for hacking into the computer systems of a Brazilian subsidiary of a New Jersey-based company and attempting to extort millions in Bitcoin.
The indictment, unsealed in Newark federal court on December 23, 2024, accuses De Oliveira of accessing confidential data unlawfully and threatening to publicize it unless his demands were met.
According to the indictment, De Oliveira, 29, a resident of Curitiba, Brazil, gained unauthorized access to the company’s Brazilian subsidiary’s computer systems in March 2020.
He obtained sensitive customer information affecting approximately 300,000 individuals.
By September 2020, he began contacting representatives of the U.S.-based parent company, including its CEO, demanding over $3 million in Bitcoin to keep the stolen data confidential.
2024 MITRE ATT&CK Evaluation Results for SMEs & MSPs -> Download Free Guide
De Oliveira’s actions violated U.S. federal laws under Title 18, including four counts of extortionate threats involving protected computers and four counts of threatening communications.
Each count carries severe penalties, including up to five years in prison, fines of up to $250,000 for extortionate threats, and up to two years for threatening communications.
The Federal Bureau of Investigation (FBI) was critical in investigating this case.
Special agents from the FBI’s Newark Field Office worked under Acting Special Agent in Charge Nelson I.
Delgado to uncover De Oliveira’s activities. U.S. Attorney Philip R. Sellinger credited their efforts as instrumental in bringing charges against the accused.
Assistant U.S. Attorney David E. Malagold from the Cybercrime Unit is leading the prosecution in this case.
While De Oliveira has been charged with serious crimes, it is important to note that these allegations remain accusations until proven guilty in a court of law.
This case highlights ongoing global challenges in combating cybercrime.
Brazil has seen several high-profile cybercrime incidents in recent years, including arrests related to international hacking groups like Lapsus$ and other data breaches targeting major corporations and government entities.
The arrest and prosecution of De Oliveira underline the importance of international cooperation between law enforcement agencies to address cross-border cyber threats effectively.
As cybercriminals continue to exploit vulnerabilities for financial gain, this case serves as a reminder for organizations worldwide to strengthen their cybersecurity measures and remain vigilant against potential threats.
Investigate Real-World Malicious Links, Malware & Phishing Attacks With ANY.RUN – Try for Free
Attackers abused compromised ConnectWise Cloud Backup credentials to access Microsoft 365 customer environments, prompting ConnectWise…
Anthropic says an internal Claude research model reconstructed how the National Security Agency generated seeds…
Two WordPress Core vulnerabilities can be chained to execute remote code without authentication, according to…
A newly disclosed OpenBSD kernel exploitation chain combines a shared memory accounting flaw with a…
GhostAction attackers have expanded their GitHub credential theft campaign with a second stage that disguises…
Indian authorities have warned that SideCopy hackers are targeting Indian organizations, including academic institutions, with…