Russia has launched a special law enforcement operation to seize and shut down four online marketplaces that were specialized in theft and sale of stolen credit card cards. The government is taking active steps to combat cybercriminals living on its soil.
To that end domains used by card fraud forms, marketplaces, Ferum Shop and Sky-Fraud were taken and plastered in a banner warning that “theft of bank funds is illegal.” A message asking “Which of you are next?” was also embedded in the HTML source code. “
The seizures were orchestrated by the Department “K,” a division of the Ministry of Internal Affairs of the Russian Federation that focuses primarily on information technology-related crimes, according to Flashpoint. In a related development, state-owned news agency TASS said that six Russian individuals were being charged with “the illegal circulation of means of payment. “
The four platforms are collectively said to have made over an estimated $263 million across Bitcoin, Litecoin, and Ether, blockchain analytics company Elliptic said. Ferum Shop, active since October 2013, made as much as $256 million in Bitcoin from stolen card sales, accounting for nearly 17% of the stolen credit card market.
The UAS Store, a popular seller of stolen remote desktop protocol (RDP) credentials and operational since November 2017, netted around $3 million in cryptocurrency proceeds, with carding store Trump’s Dumps making around $4. 1 million since setting up shop in October 2017.
This is the third crackdown by the authorities on illegal carding forums. It all kicked off with the arrests of 14 members associated with the REvil ransomware gang responsible for numerous cyberattacks worldwide.
Then on January 25, the FSB arrested Andrey Sergeevich Novak, the alleged leader of the now-defunct Infraud Organization, in Moscow, along with three others for running a criminal enterprise that dabbled in the large-scale acquisition, sale, and distribution of stolen identities, compromised debit and credit cards, personal data, computer malware, and other contraband.
The latest high-profile action also comes close on the heels of the law enforcement shutdown of Canadian HeadQuarters (aka CanadianHQ), a darknet marketplace that was involved in the purchase and sale of spam services, phishing kits, stolen credential data dumps, and access to compromised machines.
What’s more, recent months have been plagued by the closures of a number of dark web marketplaces like White House Market, Cannazon, ToRReZ, DarkMarket, Monopoly, and UniCC in a move that’s perceived as a major blow to the carding industry after the collapse of the infamous Joker’s Stash in January 2021.
“Closures and seizures of carding sites in 2022 have so far accounted for almost 50% of sales in the dark web stolen credit card market,” Elliptic said. The darknet market is still a highly profitable business, so retirements may give the operators confidence they will be able to manage a lucrative market and make their fortunes, even if they are arrested. “
