A Russian national has been indicted by the U.S. Department of Justice and added to the FBI's Most Wanted Cybercriminals list forallegedly creating and operating a cybercrime market.
See also: FBI: In 2021, ransomware groups hit 649 critical US infrastructures
Igor Dekhtyarchuk, a resident of Russia, was indicted in the Eastern District of Texas for operating a cybercrime market that sold credit cards, access to compromised devices or accounts, and personal information.
The indictment alleges that Dekhtyarchuk launched the market in May 2017 and began promoting it on Russian hacking forums starting in April 2018.
“ Dekhtyarchuk began advertising the sale of compromised account data on Russian-language hacker forums in April 2018 and opened Marketplace A in May 2018. Dekhtyarchuk immediately began advertising Marketplace A and the products it sold in May 2018 ,” the DOJ indictment states .
When buyers purchased access to a device from the marketplace, either Dekhtyarchuk or one of his associates allegedly contacted them via Telegram and sent either login credentials or a login cookie that allowed access to the purchased device or account.
See also: CISA-FBI: They warn critical US organizations about threats to SATCOM networks
Dekhtyarchuk has since been added to the FBI's Most Wanted list on charges of internet fraud, access device fraud, and aggravated identity theft.
Although the indictment did not reveal which cybercrime marketplace was created by Dekhtyarchuk, it said he operated under the alias “Floraby,” which promoted the BAYACC marketplace.
While the website appears to be down, archived screenshots show that BAYACC sold accounts for various companies, including eBay, Amazon, SamsClub, and PayPal, with prices advertised in Russian rubles.
While BYACC's Telegram still appears to be active, the website is no longer accessible.
One of the ways law enforcement is tackling the growing ransomware is to target the infrastructure and access providers that attackers use to gain access to corporate networks.
See also: FBI Warning: MFA Flaw Exploited by Government Hackers
In June 2021, an international law enforcement operation took down Slilpp, the largest online marketplace for stolen login credentials.
Later that month, law enforcement seized the servers, data, and customer logs for DoubleVPN, a double encryption service commonly used by ransomware gangs and other threat actors.
