An international law enforcement operation has taken down the website and domains for WT1SHOP, a criminal marketplace that sold stolen credit cards, IDs, and millions of login credentials.
WT1SHOP was one of the largest criminal marketplaces for PII data commonly used by threat actors to purchase credentials for account takeovers, credit cards used for online purchases, and IDs for identity theft.
See also: Zyxel: New NAS firmware fixes critical vulnerability
"WT1shop was one of the stores selling compromised accounts and personal identification information after Slilpp was taken down," AdvIntel CEO Vitali Kremez told BleepingComputer.
WT1SHOP representatives typically promoted the purchase on Russian hacking forums and Reddits that catered to online.
Servers and domains seized by law enforcement authorities
Today, the Department of Justice announced that Portuguese authorities have “seized” the WT1SHOP website and the US has seized four internet domains used to access the criminal marketplace, including wt1shop.net, wt1store.cc, wt1store.com and wt1store.net.
Other domains used by the site are wt1store.biz, wt1store.me, wt1store.xyz and wt1store.org, which have not yet been seized. However, since the site was seized, visiting any of these domains no longer allows access to the store.
See also: New Linux malware can evade detection
The operation was conducted by the Maryland District Attorney's Office and the FBI, which said the website sold the personal information of millions of users, including stolen login credentials, bank accounts, credit cards and scanned government IDs, such as passports and driver's licenses.
Dutch police estimated in June 2020 that the site had sales of $4 million paid in bitcoin.
The DOJ statement says law enforcement traced the bitcoin payments, email addresses, and administrator accounts for WT1SHOP to Nicolai Colesnicov, age 36, of the Republic of Moldova. Colesnicov is suspected of being the administrator and operator of the criminal marketplace.
See also: Play ransomware follows the tactics of Hive and Nokoyawa
Colesnicov is charged with conspiracy and trafficking in unauthorized access devices and faces a maximum sentence of 10 years in federal prison if convicted.
Information source: bleepingcomputer.com
