FBI adds Russian cybercrime market owner to most wanted list

A Russian nationwide has been indicted by the US DOJ and extra to the FBI’s Cyber Most Preferred checklist for allegedly creating and controlling a cybercrime market.

Igor Dekhtyarchuk, a resident of Russia, was indicted in the Eastern District of Texas for jogging the cybercrime marketplace that bought credit rating cards, access to compromised devices or accounts, and own info.

The indictment statements that Dekhtyarchuk introduced the marketplace in May 2017 and commenced advertising and marketing it on Russian hacking discussion boards starting with  April 2018.

“Dekhtyarchuk began advertising the sale of compromised account knowledge in Russianlanguage hacker discussion boards in April 2018 and opened Market A in May perhaps 2018. Dekhtyarchuk quickly started advertising Market A and the solutions it marketed in May possibly 2018,” reads the DOJ indictment.

“As of May perhaps 2021, Dekhtyarchuk, through Marketplace A, publicly advertised that he has marketed more than 48,000 compromised e mail accounts, 25,000 compromised Company B accounts, and 19,000 compromised Business A accounts.”

When consumers bought unit access from the marketplace, they were allegedly contacted on Telegram by Dekhtyarchuk or a single of his associates and despatched either login credentials or a login cookie that will allow access to the bought system or account.

Dekhtyarchuk has given that been additional to the FBI’s Cyber Most Preferred Listing on costs of Wire Fraud, Obtain Device Fraud, and Aggravated Identity Theft.

When the indictment did not expose what cybercrime marketplace was developed by Dekhtyarchuk, it did point out that he operated below the alias ‘Floraby.’

Utilizing KELA’s cybersecurity intelligence services DARKBEAST, BleepingComputer was equipped to uncover a man or woman named ‘Floraby’ selling the BAYACC marketplace, which marketed compromised qualifications.

Although the website seems to be down, you can see from archived snapshots that BAYACC marketed accounts for several providers, including eBay, Amazon, SamsClub, and PayPal, with the costs advertised in Russian Rubles.

Sophisticated Intel CEO Vitali Kremez also confirmed to BleepingComputer that the individual at the rear of ‘Floraby’ was a provider of bruteforced accounts that were being then offered on their BAYACC market.

“The human being leveraged compromised info from different e-commerce sites to bruteforce important retailer retail store accounts and supply them to numerous carders and fraudsters on the net,” Kremez instructed BleepingComputer.

“His shop ‘BAYACC’ mostly competed with the account store giants such as SlilPP for the legal industry share, presenting day-to-day updates of free of charge compromised accounts.”

Whilst the BYACC Telegram even now seems to be lively, the website is no extended obtainable.

A single of the techniques that legislation enforcement has been tackling the rising ransomware epidemic is to focus on the infrastructure and access suppliers that attackers use as well acquire accessibility to corporate networks.

In June 2021, an global law enforcement procedure took down Slilpp, the greatest on-line marketplace of stolen login credentials.

Later that month, legislation enforcement seized the servers, facts, and shopper logs for DoubleVPN, a double-encryption service frequently made use of by ransomware gangs and other threat actors.