Three Members Of The FIN7 Hacking Group Have Been Arrested
Three members of the prolific ‘FIN7’ hacking group have been arrested, the US Department of Justice announced this week.
It is alleged that the group stole over 15 million customer card records from over 3,600 locations, impacting at least 100 businesses in the US, UK, France and Australia, predominantly in the restaurant, gaming and hospitality industries.
The group, which has also been referred to as Carbanak and the Navigator Group, used phishing and spear-phishing emails, such as complaint emails with malicious attachments, to target their victims, often accompanied with a telephone call for authenticity.
Once the attachment was opened, the group used malware to steal card details which they then used or sold for profit on the criminal darknet.
The FIN7 group have also purportedly recruited hackers using a front company, Combi Security, to provide a guise of legitimacy.
One of the individuals is in the US, the other two are in Poland and Spain, though the US is seeking to have both extradited. The investigation into the remainder of the group is continuing.
Duncan is a technology professional with over 20 years experience of working in various IT roles. He has a interest in cyber security, and has a wide range of other skills in radio, electronics and telecommunications.