Two males have been indicted for his or her function in managing a preferred Russian darkish net market identified for promoting troves of stolen bank card data and providing cybercrime lessons.
Alex Khodyrev, a 35-year-old Kazakhstan nationwide, and Pavel Kublitskii, a 37-year-old Russian nationwide, had been charged Friday by the Justice Division with wire fraud and conspiracy to commit entry gadget fraud.
If convicted, each males face most sentences of 20 years in federal jail. Prosecutors added that two autos “traceable to proceeds of the offenses” — Khodyrev’s 2023 Mercedes-Benz and Kublitskii’s 2020 Cadillac CT5 Sport sedan — can be forfeited as a part of the fees.
Khodyrev and Kublitskii had been arrested in Miami final month after being accused of working WWH-Membership — a well known cybercriminal discussion board for stolen private data, bank card numbers and extra.
A warrant for the 2 males’s arrest referred to as WWH-Membership a “cross between Ebay and Reddit” the place hackers shared every little thing from stolen Social Safety numbers to PayPal account data. The location is written completely in Russian however FBI investigators traced the web site’s IP tackle again to servers from U.S. firm Digital Ocean, which supplied them with much more data.
The Justice Division stated the 2 ran the platform and different linked web sites like Skynetzone, Opencard, and Heart-Membership from 2014 to 2024, even after shifting to Miami two years in the past.
WWH-Membership and its sister websites “existed solely to facilitate crime” in line with the Justice Division, which added that criminals additionally used the marketplaces to purchase and promote checking account data, passwords and different delicate private data.
Customers of the platforms shared instruments and recommendations on learn how to launch cyberattacks, evade legislation enforcement and commit different sorts of fraud.
At its peak in 2023, WWH-Membership alone had greater than 353,000 customers worldwide. Khodyrev, Kublitskii and different directors earned cash from the location via promoting income, cybercrime class tuition charges and membership charges, in line with the Justice Division.
The charges appeared to vary from roughly 10,000 rubles to 60,000 rubles (roughly $130 to $780), in line with FBI investigators.
Undercover FBI brokers signed up for the location and attended a number of of the lessons supplied by the platform, in a single occasion studying learn how to achieve entry to a selected particular person’s monetary data that was stolen in a 2022 hack of monetary platform LendingTree.
The FBI ultimately used a path of e-mail addresses to seek out photographs of Khodyrev and Kublitskii and Division of Homeland Safety data confirmed that the 2 arrived in south Florida collectively in December 2022.
They claimed asylum and listed the identical residence in Hollywood, Florida. Each by no means appeared to have been employed however social media posts confirmed they rented luxurious condominiums in Sunny Isles Seashore, Florida and bought costly autos.
“Round March 2023, KHODYREV bought a 2023 Corvette at a South Florida dealership with roughly $110,000 money,” the courtroom submitting defined.
Cybersecurity researchers at Flashpoint stated WWH-Membership continues to be on-line and operational, with the location’s present directors making an attempt to distance themselves from Kublitskii and Khodyrev.
WWH-Membership deleted the accounts recognized by the FBI and urged members to vary their display screen names in line with Flashpoint, which referred to as the location “one of many largest Russian-language carding boards.”
Recorded Future
Intelligence Cloud.
Study extra.