GINC-APT-0541 · Criminal

Infraud Organization

Also Operation “Shadow Web”.

Category
Criminal · Financially motivated: ransomware, fraud and theft.
Origin
Unknown
Motivation
Financial crime; Financial gain
Seen
2010
Sources
4 sources carry it
Identifier
GINC-APT-0541 · infraud-organization

What it is

(Bank Info Security) The Infraud Organization ran an online forum dedicated to criminal activity that federal prosecutors claim had more than 10,000 members in March 2017. The site used the slogan 'In Fraud We Trust,' according to the Justice Department. The gang that operated Infraud engaged in a variety of identity theft and financial fraud from October 2010 to February 2018, prosecutors say. It's believed to be responsible for the sale or purchase of over 4 million compromised payment card numbers during that time, according to the court filing. The aim of the organization was to develop the 'premier online destination for the purchase and sale of stolen property and other contraband' that also serves as the source of other contraband vendors, according to the Justice Department. The gang used advertising to direct web traffic from its website to other automated sites that were owned or operated by its members, helping other cybercriminals traffic in point-of-sale malware, banking Trojans, stolen payment card details and counterfeit identification, prosecutors say.

Names

The names each vendor, agency and source gives it. Naming differs by who tracks the actor, so one group carries many.

Operations
Operation “Shadow Web”

Tools

The tools and malware families the sources tie to it.

  • FastPOS

Sources