Law enforcement agencies from across the globe have coordinated a takedown of the xDedic Marketplace, a notorious dark web platform that facilitates the trade of stolen data and compromised servers. They have charged 19 individuals linked to running the marketplace

The xDedic Marketplace was a website on the dark web that illegally sold login credentials (usernames and passwords) to servers located across the world and personally identifiable information—dates of birth and Social Security numbers—of U.S. residents.

Marketplace seller Dariy Pankov, a Russian national, was one of the highest sellers on the Marketplace by volume, listing for sale the credentials of more than 35,000 compromised servers located all over the world and obtaining more than $350,000 in illicit proceeds.

Nigerian national Allen Levinson was a prolific buyer on the Marketplace who held particular interest in purchasing access to U.S.-based Certified Public Accounting firms. He used the information he obtained from those servers to file hundreds of false tax returns with the United States government, requesting more than $60 million in fraudulent tax refunds.

12 out of the 19 suspects charged following the international investigation into xDedic’s activity have already been sentenced, five are scheduled to receive a sentence, and two are pending extradition from the United Kingdom.

This investigation also benefited greatly from cooperation with foreign law enforcement in Belgium, Georgia, Germany, Poland, Spain, the United Kingdom, Romania, Switzerland, Estonia, Latvia, Bulgaria, Ukraine, Lithuania, and Moldova. The cases are being prosecuted by Assistant United States Attorneys Rachel K. Jones, Carlton C. Gammons, and Suzanne Nebesky.

READ
Chinese Hackers Breach T-Mobile in Massive Espionage Operation