Feds Seize Password Database Used in Massive Bank Account Takeover Scheme

The SecurityWeek article reports that the US Justice Department announced the seizure of a web domain and a password database used by a cybercrime group to steal millions from bank accounts. According to the Justice Department, the domain web3adspanels[.]org hosted a backend panel used to store and manipulate thousands of stolen login credentials.

The group ran a massive bank account takeover scheme using malicious ads on search engines to drive victims to fake bank sites, where credentials were handed over and then used to access and drain accounts. The FBI identified nearly 20 US victims, including two companies, and the attackers attempted to steal roughly $28 million, with losses estimated at about $14.6 million.

Estonian law enforcement also participated, with DOJ saying they preserved and collected data from servers hosting the phishing pages and stolen credentials. The DOJ’s announcement notes there have been no arrests or charges mentioned at this time.