Security News > 2021 > June > FIN7 Supervisor Gets 7-Year Jail Term for Stealing Millions of Credit Cards
A Ukrainian national and a mid-level supervisor of the hacking group known as FIN7 has been sentenced to seven years in prison for his role as a "Pen tester" and perpetuating a criminal scheme that enabled the gang to compromise millions of customers debit and credit cards.
FIN7, also called Anunak, Carbanak Group, and the Navigator Group, is said to have engaged in a sophisticated malware campaign at least since 2015 targeting restaurant, gambling, and hospitality industries in the U.S. to plunder credit and debit card numbers that were then used or sold for profit on underground forums.
According to court documents, FIN7 used a firm called Combi Security as a front to recruit hackers - one of them being Kolpakov - to "Provide a veil of legitimacy to the illegal enterprise," while projecting itself as "One of the leading international companies" that offered penetration testing services to customers worldwide.
"Once an attached file was opened and activated, FIN7 would use an adapted version of the Carbanak malware, in addition to an arsenal of other tools, to access and steal payment card data for the business's customers."
Kolpakov is the second member of the FIN7 group to be sentenced in the U.S. since the start of the year.
In April, another 35-year-old Ukrainian national Fedir Hladyr was awarded 10 years in prison for his role as a high-level manager and systems administrator responsible for maintaining the server infrastructure that FIN7 used to attack and control victims' machines.