International sting on the ‘world’s biggest fraudsters paradise’ stealing YOUR passwords: Criminal ‘online market’ where hackers sell bank, eBay, Amazon and Facebook log-ins for as little as $1 is shut down. How to find out if YOU have been targeted
- Genesis Market was taken offline in an international law enforcement raid
- Multinational crackdown was dubbed ‘Operation Cookie Monster’
- Authorities have created database to check for compromised log-in information
International law enforcement agencies have seized a sprawling dark web marketplace popular with cybercriminals, where stolen passwords were sold for as little as $1 each.
The criminal cyber-bazaar, known as Genesis Market, was seized in a multinational crackdown dubbed ‘Operation Cookie Monster,’ Britain’s National Crime Agency (NCA) said on Wednesday.
‘We assess that the Genesis is one of the most significant access marketplaces anywhere in the world,’ said Rob Jones, the NCA’s Director General of Threat Leadership.
The NCA estimated that the service hosted about 80 million credentials and digital fingerprints stolen from more than two million people.
A banner plastered across Genesis Market’s site late on Tuesday said domains belonging to the organization had been seized by the FBI.
Visitors to the Genesis marketplace today are greeted by this splash page after the takedown
Logos of other European, Canadian, and Australian police organizations were also emblazoned across the site, along with that of cybersecurity firm Qintel.
The NCA said 17 countries were involved in the operation, which was led by the FBI and Dutch National Police and had resulted in about 120 arrests, more than 200 searches and almost 100 pieces of ‘preventative activity’.
Qintel did not immediately return messages seeking comment and Reuters could not immediately locate contact details for Genesis Market’s administrators.
The FBI seemed eager for information about them as well, saying in its seizure notice that anyone who had been in touch with them should ‘Email us, we’re interested.’
Genesis was specialised in the sale of digital products, especially ‘browser fingerprints’ harvested from computers infected with malicious software, said Louise Ferrett, an analyst at British cybersecurity firm Searchlight Cyber.
Because those fingerprints often include credentials, cookies, internet protocol addresses and other browser or operating system details, they can be used by criminals to bypass anti-fraud solutions such as multi-factor authentication or device fingerprinting, she said.
The site had been active since 2018.
Police and the NCA arresting a UK suspect in connection with the criminal Genesis Market site
Operation was led by the FBI and Dutch police forces and 17 other countries, including the UK’s National Crime Agency, who made 24 arrests in and around Grimsby
The NCA said Genesis had operated by selling credentials from as little as 70 cents, and as much as hundreds of dollars depending on the stolen data available.
‘To get up and running on this you just have to know of the site, potentially be able to get yourself an invite which given the volume of users probably wouldn’t be particularly difficult,’ said Will Lyne, NCA Head of Cyber Intelligence.
‘Once you become a user, it’s really easy to then … perpetrate criminal activity.’
The NCA said countries involved in the investigation also included Australia, Canada, Denmark, Estonia, Finland, France, Germany, Iceland, Italy, New Zealand, Poland, Romania, Spain, Sweden, and Switzerland.
People can check if they were victims by visiting a database created by Dutch authorities.
Developing story, more to follow.
