As part of a court-authorized operation announced on June 5 by the Eastern District of Virginia, US officials seized 145 domains and confiscated crypto assets tied to the platform. The targeted infrastructure and financial networks were shut down, and all seized domains now redirect to law enforcement-controlled servers.

A Marketplace That Sold Millions of Stolen Cards

Launched in March 2022, BidenCash rapidly grew to over 117,000 users. Over its lifespan, the marketplace reportedly facilitated the trade of more than 15 million stolen credit card numbers and other forms of sensitive data.

According to US authorities, BidenCash generated approximately $17 million in revenue through these illegal transactions. The site also offered login credentials granting unauthorized access to systems — a major draw for cybercriminals.

In a bold marketing move, the platform leaked 3.3 million credit card records for free between October 2022 and February 2023, aiming to boost visibility and attract new users in underground forums.

Crypto Seized Alongside Digital Infrastructure

Beyond the web domains, US officials also confirmed the seizure of cryptocurrency assets linked to BidenCash’s unlawful activity. However, the exact amount of crypto recovered has not been disclosed.

The international investigation was spearheaded by the US Secret Service’s Frankfurt field office, the Cyber Investigative Section, and the FBI’s Albuquerque division. This effort is part of a larger initiative to disrupt crypto-powered criminal networks operating across borders.

A Pattern of Global Action Against Cybercrime

The BidenCash takedown follows a series of similar operations. In May, the multinational initiative “Operation RapTor” dismantled several darknet drug marketplaces. That coordinated effort resulted in 270 arrests across 10 countries and the seizure of assets worth $200 million, including large volumes of digital currency.

Earlier in March 2024, US authorities sanctioned the operator behind “Nemesis” — a defunct dark web site that facilitated the sale of drugs, fake IDs, and hacking tools. Officials also blacklisted multiple Bitcoin and Monero addresses linked to Nemesis, which had received hundreds of thousands of dollars over its period of activity.

The Dark Web’s Crypto Economy Keeps Growing

According to blockchain analytics firms, darknet markets brought in over $1.7 billion in revenue in 2024, slightly up from the previous year. Russian-speaking platforms continue to dominate the space, in part due to minimal regulatory pressure from local authorities.

You can also freely share your thoughts and comments about the topic in the comment section. Additionally, don’t forget to follow us on our Telegram, YouTube, and Twitter channels for the latest news and updates.

The post BidenCash Takedown: US Seizes 145 Domains and Crypto Assets appeared first on Coin Engineer.

Major Blow to LockBit 

LockBit targets companies and individuals with ransomware. This time, the gang itself was hacked. Its dark web panel was exposed, and 59,975 Bitcoin addresses along with victim negotiations were leaked. Furthermore, this data provides clues for tracking the gang’s money flow. 

Among the victims targeted by the group are Boeing, Royal Mail UK, ICBC, and Capital Health. The gang allows affiliates to use LockBit’s tools to carry out attacks and share the ransom with the developers. According to Chainalysis reports, Russia-linked gangs (e.g., Evil Corp) earned over $400 million in cryptocurrency from ransomware in 2021. Crypto firms, particularly decentralized finance (DeFi) platforms or small exchanges, are vulnerable to such attacks. 

The panel displays the message: “Don’t commit crimes, crime is bad, R from Prague xoxo,” along with a link to download the “paneldb_dump.zip” file. 

The leaked data includes Bitcoin wallet addresses and ransom negotiations. LockBit’s leader, “LockBitSupp,” claimed that the private keys are secure. However, experts are skeptical of this claim. On the other hand, the leaked information will make it easier for law enforcement to track the gang. The Bitcoin addresses put the gang’s revenue at risk. 

Cybersecurity Warning 

This incident revealed that cybercrime gangs are also vulnerable. Experts urge companies to protect themselves against ransomware. The leaked Bitcoin addresses could enhance cryptocurrency tracking. This situation underscores the importance of cybersecurity measures. 

The attack on LockBit is said to potentially reshape the cybercrime world. The leaked data puts the gang’s affiliates in a difficult position. Law enforcement and experts may be able to dismantle the gang by analyzing this information. Cybersecurity experts believe such incidents could foster greater collaboration. 

Lastly, it should be noted that more work is needed for security in the digital world.

You can also freely share your thoughts and comments about the topic in the comment section. Additionally, don’t forget to follow us on our Telegram, YouTube, and Twitter channels for the latest news and updates.

The post Cyber Strike on LockBit Gang: 60K Bitcoin Addresses Exposed  appeared first on Coin Engineer.

Crypto Transfers Unveil Lin’s Identity

The FBI’s investigation revealed Lin’s alleged involvement in the Incognito Market by tracing cryptocurrency transactions from the dark web to a crypto exchange account in his name. FBI Assistant Director in Charge James Smith commented, “For nearly four years, Rui-Siang Lin allegedly operated ‘Incognito Market,’ one of the largest online platforms for narcotics sales, conducting $100 million in illicit narcotics transactions and reaping millions of dollars in personal profits.”

Incognito Market functioned as an onion-based e-commerce platform, accessible via the Tor web browser. It facilitated the sale of various drugs, including cocaine, LSD, MDMA, and prescription amphetamines like Adderall, using Bitcoin and Monero for payments. The platform also imposed a 5% fee on transactions and offered an escrow service.

Legal Consequences and Forfeitures

The Department of Justice (DOJ) noted that Incognito Market closed in March this year, coinciding with an exit scam that allegedly stole millions of dollars in customer cryptocurrency. Lin faces several serious charges, including engaging in a criminal enterprise, narcotics conspiracy, conspiracy to sell misbranded medication, and money laundering. If convicted, he faces a mandatory life sentence for the criminal enterprise charge, with the narcotics conspiracy charge also carrying a maximum life sentence.

The FBI’s tracking efforts showed that funds from Incognito Market were sent to a crypto wallet controlled by Lin. From there, the funds were moved to an exchange account in his name. FBI task force officer Mark Rubens detailed at least four transfers where Incognito Market-derived Bitcoin was swapped for Monero, then deposited into Lin’s crypto exchange account. The exchange provided the FBI with Lin’s Taiwanese driver’s license, email address, and phone number, further solidifying the evidence against him.

The DOJ has issued a forfeiture for cryptocurrency held in Lin’s Binance and Kraken accounts. The deposits to Lin’s crypto exchange accounts significantly grew with the market’s success, from around $63,000 in 2021 to nearly $4.2 million in 2023, with a second exchange account seeing $4.5 million deposited between July and November of the previous year.

The arrest of Rui-Siang Lin marks a significant victory for law enforcement against dark web drug markets. The meticulous tracking of cryptocurrency transactions played a crucial role in uncovering Lin’s identity and his alleged operations of the Incognito Market.

The post Alleged Dark Web Drug Market Operator Arrested Because of Crypto appeared first on Coin Engineer.

Trust Wallet’s Alarming Revelation

Trust Wallet, a reputable crypto wallet provider, sounded the alarm bells after uncovering evidence of a zero-day exploit lurking within Apple’s iMessage application. CEO Eowyn Chen’s disclosure of a screenshot purportedly showcasing the exploit for sale on the dark web for a staggering $2 million sparked immediate concern among iOS users. The urgency of Trust Wallet’s warning, urging users to disable iMessage to mitigate the risk, underscores the severity of the threat posed by this exploit.

Industry Response and Skepticism

In the wake of Trust Wallet’s revelation, industry experts and commentators have responded with a mix of alarm and skepticism. While some have echoed Trust Wallet’s concerns and emphasized the gravity of the situation, others have raised doubts about the validity of the claimed threat. The criticism from the public emphasizes the lack of concrete evidence that goes beyond the screenshot and represents an overall sense of careful inspection in the cyber security space.

Navigating the Perilous Landscape of Zero-Day Exploits

The emergence of this zero-day exploit serves as a stark reminder of the ever-present threats looming in the digital realm. With cyber criminals constantly comes up with new tactics to exploit vulnerabilities in popular software and platforms, the need for strong cyber security measures has never been more pressing. As iOS users grapple with the implications of this recent exploit, vigilance, informed decision-making, and collaboration between industry stakeholders are essential in safeguarding against future attacks into the digital infrastructure we rely upon.

The post Unverified Zero-Day Exploit in iMessage Raises Security Concerns for iPhone Users appeared first on Coin Engineer.