It has recently been reported that five men and a woman were arrested on the suspicion of running cryptocurrency scams that could have netted them €24 million in Bitcoin (BTC).
The suspects were arrested from their homes in the United Kingdom and the Netherlands after a 14-month joint operation between Europol, Eurojust, the UK’s National Crime Agency (NCA) as well as South West Regional Cyber Crime Unit (SW RCCU), and the Dutch police.
Europol revealed on Tuesday that the six individuals were suspected of being involved in cryptocurrency thefts made possible through spoofing.
The suspects allegedly used “typosquatting” — the purchase of domain names similar to legitimate online services but containing a typographical error or slight variation — to set up mirror image websites of correct platforms.
These spoofed domains were developed to look precisely like genuine cryptocurrency trading posts and platforms, and unless potential victims possessed a sharp eye, they would not have realised they were visiting a fraudulent domain.
The spoofed domains would then be used to lure victims into submitting their account credentials for legitimate cryptocurrency services. Granted the keys to their crypto kingdoms, the cybercriminals then allegedly accessed their Bitcoin wallets and pilfered their funds.
Law enforcement estimates at least €24 million in cryptocurrency was stolen from a minimum of 4,000 users in 12 countries — although these figures are expected to rise.
The case has been referred to the European Cybercrime Centre (EC3) and the Joint Cybercrime Action Taskforce (J-CAT).
As cryptocurrency continues to prove lucrative, especially in a market in which different levels of security are in place, cyberattackers will continue to try and cash in.
In January, Europol arrested a British man believed to be responsible for the theft of over €10 million in IOTA cryptocurrency. The individual, who remains unnamed, is thought to have created a random password generator for use by IOTA traders which would secretly steal their unique wallet passwords.
In keeping with the cryptocurrency market and the crimes which can occur within it is no small task, and to help officers in their investigations, Europol recently revealed a new method of training which utilises gamification.
The “cryptocurrency-tracing serious game,” in which investigators will practice tracing cryptocurrency trading and laundering in scenarios akin to real-life, is due to launch later this year.