A South Korean court sentenced two executives at a data recovery company to three years in prison each for working with a ransomware group that targeted businesses.

Los ejecutivos, identificados únicamente como A y B, presuntamente recibieron información de los hackers sobre las extensiones de archivo utilizadas para cifrar los datos de las víctimas. Luego, utilizaron dicha información para colocar anuncios de búsqueda en línea para servicios de recuperación.

Después de que las víctimas pagaron por la recuperación, la empresa envió parte del dinero a los hackers en Bitcoin. Los hackers proporcionaron herramientas de descifrado que luego se utilizaron para restaurar los archivos de las víctimas.

The scheme operated from October 2018 to July 2022 and involved 730 recovery cases, with the company receiving about 2.6 billion won (€1.5 million). The Seoul Central District Court sentenced both executives to three years in prison. The court considered their smaller share of the profits as a mitigating factor.

A cybercriminal who used AI to steal digital identities arrested in Spain

Spanish National Police have arrested a cybercriminal in Murcia who allegedly used artificial intelligence to trick a digital identity verification system.

The suspect appeared in video calls with a fake ID while AI technology changed his face in real time to match the person shown in the document. He made 38 attempts using more than 30 different identities.

The suspect also used fake IDs, manipulated photographs and homemade lights to imitate the security features and holograms found on real identity documents. He also used VPNs and many mobile phones to hide his identity.

The investigation began after a company that issues digital certificates noticed several suspicious applications. During one video verification, the AI system briefly failed and showed the suspect’s real face.

Police found more than 320 phone lines linked to 24 mobile devices, many of them registered using stolen identities. During a search, officers also seized an encrypted laptop, several mobile phones, storage devices and documents. Authorities believe the suspect wanted to obtain valid digital signatures to use later for financial fraud.

Three police officers arrested over alleged misuse of surveillance data

Tres tenientes del sheriff del condado de Bibb, en Georgia (EE. UU.), han sido arrestados por presunto uso indebido de tecnología de vigilancia y control de tráfico.

The Flock surveillance system is an automated license plate reader (ALPR) and public safety platform designed to monitor and record vehicle movements.

According to local media reports, the deputies Joseph Marquee Callaway, Coznavian Torsell Stubbs and Toni Cierra Lewis are each facing at least one felony stalking charge. They are also accused of violating their oaths as public officers.

Callaway enfrenta tres cargos por stalking, junto con dos cargos por uso prohibido de un emisor de prelación de dispositivos de control de tráfico y una violación del juramento de cargo. Stubbs enfrenta cargos de stalking, violación del juramento de cargo y uso prohibido de un emisor de prelación de dispositivos de control de tráfico.
La Oficina del Sheriff del condado de Bibb declaró que los casos son independientes e implican personas con las que los agentes tenían relaciones personales.

The alleged misuse of the Flock surveillance system was discovered during a monthly audit of system searches by the Sheriff’s Office. Officials said the deputies made unlawful queries of the system.

Ukraine shuts down over 90 fraudulent call centers in a nationwide operation

Ukrainian law enforcement agencies have shut down 94 fraudulent call centers during a large-scale operation carried out across several regions of the country. Police conducted 411 searches and found 1,794 fully equipped workstations. So far, 26 suspects have been formally charged.

Law enforcement officers seized more than 3,300 computers, 1,346 phones, over 5,200 SIM cards, 90 bank cards and access tools for 20 cryptocurrency wallets. Authorities also confiscated 22 cars, around $2 million, €64,000, cash in Ukrainian hryvnia, one kilogram of gold bars and jewelry. Police checked 867 addresses where fraudulent call centers were believed to operate and identified 67 financial tools linked to the crimes, including bank accounts, cryptocurrency wallets and people used to move money.

Los centros de llamadas utilizaban distintos esquemas para robar dinero u obtener acceso a las cuentas bancarias de las víctimas. Los operadores a menudo se hacían pasar por empleados de bancos, corredores o agentes de las fuerzas del orden. Advertían a las víctimas sobre transacciones sospechosas falsas, les ofrecían falsas oportunidades de inversión o prometían recuperar el dinero perdido en estafas anteriores. Las víctimas eran persuadidas para transferir dinero, solicitar préstamos, compartir sus datos bancarios y códigos de confirmación, o instalar software de acceso remoto en sus dispositivos.

Some of the call centers targeted people in other countries. In one case, Ukrainian police are working with German authorities to investigate a network that targeted EU citizens through fake investment platforms and remote-access software.

Los sospechosos enfrentan cargos por fraude y blanqueo de capitales. Dependiendo de su rol, podrían recibir hasta 12 años de prisión y el decomiso de sus bienes.

Obtener una demo

ImmuniWeb puede ayudarle a prevenir brechas de datos y cumplir con los requisitos normativos.

Police arrest suspects in €29M illegal gambling and exploitation case

South Korean police have arrested two men accused of running illegal adult-content websites that were used to promote more than 10 illegal gambling sites.

The suspects, aged 40 and 36, were sent to prosecutors in custody. Police are also investigating more than 10 other people, including alleged leaders based overseas. The group is accused of operating the websites from the Philippines and other locations, including two illegal adult-content sites used to attract visitors to gambling sites, 18 gambling sites and 587 gambling distributors.

The gambling sites handled about 4.7 trillion won (€2.87 billion) in bets over five years. Police estimate that the group made about 47.6 billion won (€29.1 million) in illegal profits, excluding money returned to gamblers.

One suspect managed operations in the Philippines. The other, who has a doctorate in computer science, allegedly led the development, security and maintenance of the websites. Police said he used virtual servers and other security techniques to avoid detection. One suspect was arrested at Incheon Airport on August 2 after being placed on an Interpol Red Notice. The second was arrested at his home the following day.

Police have shut down 10 of the illegal adult-content and gambling sites and are working to take down the remaining sites. Authorities also plan to seek Interpol Red Notices for two alleged leaders who are still abroad.

Meanwhile, in the UK, a 20-year-old British man linked to the so-called “Com” group was sentenced to two years in prison for sexually exploiting and threatening 117 teenage girls online. The term ‘The Com’ refers to loosely connected online groups where members pressure victims into self-harm and sexual abuse to gain recognition and status within the group.

Using platforms such as Snapchat, Telegram and Discord, Justin Swaddle pressured victims to send sexual images and harm themselves, using threats to blackmail them. He pleaded guilty to multiple child sexual abuse offenses and blackmail and will face restrictions for 10 years after his release.