he group was engaged in the sale of stolen credentials from millions of loyalty program participants.
Law enforcement officers in Poland and Switzerland, with the assistance of Europol and Eurojust, stopped the activities of the cybercriminal group InfinityBlack, which was involved in the sale of stolen credentials, the creation and distribution of malware and hacker tools, as well as fraud.
On April 29, 2020, Polish police conducted six searches in five regions of the country and arrested five alleged InfinityBlack members. During the searches, electronic equipment, external hard drives and hardware cryptocurrency wallets containing about € 100 thousand each were seized. Two platforms with databases with more than 170 million entries were also disabled.
The main source of income for InfinityBlack was the theft of the credentials of participants in loyalty programs and their sale to other, less technically savvy criminal groups who exchanged points earned in the loyalty program for expensive electronic devices.
The grouping was divided into three teams, and each of them performed its tasks. The developers created tools for checking the quality of stolen databases, testers checked the consistency of the data, and project managers distributed subscriptions to cryptocurrency loyalty programs.
Hackers wrote a complex script with which they were able to access a large number of user accounts in Switzerland. Although the damage is estimated at € 50 thousand, the attackers had access to accounts with potential losses of more than € 610 thousand.
Law enforcement officers in Poland and Switzerland, with the assistance of Europol and Eurojust, stopped the activities of the cybercriminal group InfinityBlack, which was involved in the sale of stolen credentials, the creation and distribution of malware and hacker tools, as well as fraud.
On April 29, 2020, Polish police conducted six searches in five regions of the country and arrested five alleged InfinityBlack members. During the searches, electronic equipment, external hard drives and hardware cryptocurrency wallets containing about € 100 thousand each were seized. Two platforms with databases with more than 170 million entries were also disabled.
The main source of income for InfinityBlack was the theft of the credentials of participants in loyalty programs and their sale to other, less technically savvy criminal groups who exchanged points earned in the loyalty program for expensive electronic devices.
The grouping was divided into three teams, and each of them performed its tasks. The developers created tools for checking the quality of stolen databases, testers checked the consistency of the data, and project managers distributed subscriptions to cryptocurrency loyalty programs.
Hackers wrote a complex script with which they were able to access a large number of user accounts in Switzerland. Although the damage is estimated at € 50 thousand, the attackers had access to accounts with potential losses of more than € 610 thousand.