FIN9: Group members accused of attacks with losses exceeding $71 million.

Four Vietnamese nationals, linked to the hacking group FIN9, are accused of participating in a series of attacks that have caused more than $71 million in losses to companies in the U.S.

The defendants, Ta Van Tai, Nguyen Viet Quoc, Nguyen Trang Xuyen, and Nguyen Van Truong, committed cybercrimes from May 2018 to October 2021, stealing data and money directly from U.S. organizations.

“The FIN9 hacking group defendants were prolific international hackers who, for years, allegedly used campaigns phishing, supply chain attacks and other hacking methods to steal millions from their victims,” said U.S. Attorney Philip R. Sellinger.

«They did all this by hiding their identities behind keyboards, VPNs , and fake IDs, but the Department of Justice found them.».

See also: Chinese hackers distribute SpiceRAT and SugarGh0st malware

FIN9 hackers: How they operated

Hackers used malicious messages and electronic communications in general to trick people into revealing personal information (e.g. login credentials, passwords, and credit card details).

Targeted phishing attacks were directed at specific individuals within organizations, and hackers posed as trusted contacts to gain unauthorized access to the victim's computer network.

The DOJ says the FIN9 hacking group networks computer of third-party vendors that provided services or critical software to their victims' operations. By breaching these vendors (a supply chain attack), they gained indirect access to the networks they wanted.

In other cases, they allegedly used malware and scripts to exploit known vulnerabilities in the victim's network.

Once FIN9 gained access to a target network, it stole confidential data , including financial information, account credentials , credit card details, etc. The hackers then sold the stolen data in exchange for Bitcoin and other cryptocurrencies.

See also: Russian Nobelium hackers target French diplomatic entities

In some cases, the FIN9 hacking group used stolen personal information (PII) to create fake online accounts and hide its illegal activities.

Accusations against FIN members9

The four Vietnamese defendants face serious penalties if convicted on all charges.

The six charges listed in the indictment, but not all of them, are:

• Conspiracy to commit fraud and related activity in relation to computers – Up to 5 years imprisonment
• Conspiracy to commit fraud – Up to 20 years in prison
• Computer fraud and abuse – Up to 10 years in prison
• Identity Theft – Mandatory 2-year prison sentence
• Conspiracy to commit identity document fraud – Up to 15 years in prison
• Conspiracy to Launder Money – Up to 20 Years in Prison

Ta Van Tai is charged with all of the above, Nguyen Viet Quoc is excluded from the money laundering charge and the other two are also excluded from the identity theft charges.

In addition, the defendants are subject to confiscation of property acquired directly or indirectly from their illegal activities.

See also: Chinese hackers UNC3886 exploit Fortinet, Ivanti and VMware vulnerabilities

The charges against the four Vietnamese nationals, linked to the FIN9 hacking group, serve as a reminder of the ongoing threat posed by cybercriminals . They also underscore the need for continued efforts to strengthen cybersecurity measures and increase cooperation to combat this global issue. Companies must remain vigilant in protecting their systems, and individuals should take precautions to protect their personal information. Only through proactive measures and joint efforts can we hope to mitigate the devastating impact of cybercrimes such as those committed by FIN9.

Source: www.bleepingcomputer.com