Wednesday, December 18, 2024
HomeCyber Security NewsxDedic Marketplace Admin and Operators Arrested

xDedic Marketplace Admin and Operators Arrested

Published on

SIEM as a Service

In a landmark victory for cybersecurity, the xDedic Marketplace, a notorious haven for cybercrime, has been shut down. 

This international operation, spearheaded by the U.S. Attorney’s Office, FBI, IRS-CI, and a consortium of law enforcement agencies from Belgium, Ukraine, and Germany, marks a significant blow to the underground economy of compromised data and access.

For years, xDedic operated in the shadows of the internet, serving as a clandestine marketplace for hackers and cybercriminals to peddle their wares. 

- Advertisement - SIEM as a Service

Stolen credentials, personal information, and access to compromised systems across the globe were all available for purchase, with buyers able to filter their search by price, location, and operating system. 

This vast repository of ill-gotten gains fueled various criminal activities, from financial fraud and identity theft to corporate espionage and infrastructure disruption.

Unveiling the Shadowy Network:

The takedown of xDedic culminated in a meticulous investigation spanning multiple countries. 

Law enforcement agencies meticulously tracked the website’s operations, unraveling its intricate web of servers strategically dispersed across the globe. 

Bitcoin, the cryptocurrency employed by xDedic, was meticulously traced, providing crucial insights into the marketplace’s financial transactions and user base.

A Multi-pronged Attack:

On January 24, 2019, the hammer of justice fell. Seizure orders were executed against xDedic’s domain names, plunging the marketplace into darkness. 

This decisive action resulted from close collaboration between the U.S. Attorney’s Office, FBI, IRS-CI, and their European counterparts. 

The Belgian Federal Prosecutor’s Office, the Ukrainian National Police, and Europol all played crucial roles in dismantling the website’s infrastructure.

Based on evidence gathered during the investigation, authorities estimate that the website facilitated over $68 million in fraud. 

The victims span the gamut of industries, including government agencies, hospitals, financial institutions, and educational institutions, underscoring the far-reaching impact of xDedic’s illicit operations.

Gurubaran
Gurubaran
Gurubaran is a co-founder of Cyber Security News and GBHackers On Security. He has 10+ years of experience as a Security Consultant, Editor, and Analyst in cybersecurity, technology, and communications.

Latest articles

New VIPKeyLogger Via Weaponized Office Documenrs Steals Login Credentials

The VIPKeyLogger infostealer, exhibiting similarities to the Snake Keylogger, is actively circulating through phishing...

INTERPOL Urges to End ‘Pig Butchering’ & Replaces With “Romance Baiting”

INTERPOL has called for the term "romance baiting" to replace "pig butchering," a phrase...

New I2PRAT Malware Using encrypted peer-to-peer communication to Evade Detections

Cybersecurity experts are sounding the alarm over a new strain of malware dubbed "I2PRAT,"...

Earth Koshchei Employs RDP Relay, Rogue RDP server in Server Attacks

 A new cyber campaign by the advanced persistent threat (APT) group Earth Koshchei has...

API Security Webinar

72 Hours to Audit-Ready API Security

APIs present a unique challenge in this landscape, as risk assessment and mitigation are often hindered by incomplete API inventories and insufficient documentation.

Join Vivek Gopalan, VP of Products at Indusface, in this insightful webinar as he unveils a practical framework for discovering, assessing, and addressing open API vulnerabilities within just 72 hours.

Discussion points

API Discovery: Techniques to identify and map your public APIs comprehensively.
Vulnerability Scanning: Best practices for API vulnerability analysis and penetration testing.
Clean Reporting: Steps to generate a clean, audit-ready vulnerability report within 72 hours.

More like this

New VIPKeyLogger Via Weaponized Office Documenrs Steals Login Credentials

The VIPKeyLogger infostealer, exhibiting similarities to the Snake Keylogger, is actively circulating through phishing...

INTERPOL Urges to End ‘Pig Butchering’ & Replaces With “Romance Baiting”

INTERPOL has called for the term "romance baiting" to replace "pig butchering," a phrase...

New I2PRAT Malware Using encrypted peer-to-peer communication to Evade Detections

Cybersecurity experts are sounding the alarm over a new strain of malware dubbed "I2PRAT,"...