Security News > 2023 > January > Mon Dieu! Suspected French ShinyHunters gang member in the dock

A French citizen was scheduled to appear before a US court on Friday on a nine-count indictment related to his alleged involvement in the ShinyHunters cybercrime gang that trafficked in identity and corporate data theft and sometimes extortion.

Since early 2020, the ShinyHunters crew has stolen "Millions of customer records" and sold sensitive data belonging to more than 60 companies in Washington state and elsewhere around the world, according to the US Attorney's office.

The conspiracy to commit computer fraud and abuse charge carries a maximum of 10 years in prison, while conspiracy to commit wire fraud count is punishable by 27 years, and wire fraud itself by an additional by 20 years, if the court so decides.

According to the court documents [PDF] the trio's alleged criminal activities started with targeted phishing emails "Designed to deceive and dupe recipients into disclosing login credentials and access keys."

FBI smokes ransomware Hive after secretly buzzing around gang's network for months UK Cyber Security Centre's scary new story: One phish, two phish, Russia phish, Iran phish Bloke allegedly stole, sold private info belonging to 'tens of millions' globally Crims steal data on 40 million T-Mobile US customers.

These, of course, weren't real websites, but rather ones controlled by ShinyHunters and used to steal victims' credentials.

News URL

https://go.theregister.com/feed/www.theregister.com/2023/01/28/shinyhunters_sebastien_raoult/