Security News > 2022 > May > Interpol arrests alleged leader of the SilverTerrier BEC gang
After a year-long investigation that involved Interpol and several cybersecurity companies, the Nigeria Police Force has arrested an individual believed to be in the top ranks of a prominent business email compromise group known as SilverTerrier or TMT. Codenamed Delilah, the law enforcement operation engaged police agencies across four continents and is the third one focused on identifying and arresting suspected members of the SilverTerrier gang.
SilverTerrier activity dates since at least 2015 and expanded into a massive BEC and phishing operation, with many of its members originating from Nigeria.
Security researchers have been tracking the gang under different names, with Palo Alto Networks using SilverTerrier to refer to Nigerian BEC actors, and Group-IB using the TMT tag for its activity.
Both companies have collaborated with Interpol for Operation Delilah, along with cybersecurity company Trend Micro, providing threat intelligence, telemetry data, and other insights about BEC actors.
This follows two other Interpol operations, Falcon I in 2020 and Falcon II in 2021, which together resulted in the arrest of 14 SilverTerrier members.
Palo Alto Networks notes that the suspect shares connections with other BEC scammers - Onuegbu Ifeanyi Ephraim, Darlington Ndukwu, and Onukwubiri Ifeanyi Kingsley, that were arrested during Interpol's Operation Falcon II. For its BEC activity, the SilverTerrier BEC group used various aliases to register more than 240 domain names, 50 of them serving as command and control servers for malware such as ISRStealer, Pony, and LokiBot.