Four members of the FIN9 group were charged with crypto-related hacks of US companies resulting in more than $71 million in losses, according to the US Attorney’s Office, District of New Jersey.
Four Vietnamese nationals — Ta Van Tai, Nguyen Viet Quoc, Nguyen Trang Xuyen, and Nguyen Van Truong — allegedly hacked the computer networks of numerous US companies between May 2018 and October 2021, the indictment said.
“Cyber actors cloak themselves in the virtual world, hiding in a space most people can’t see and don’t understand,” FBI Newark Special Agent in Charge James E. Dennehy said, adding: “However smart these hackers believe they are at disguising themselves, these members of the FIN9 group couldn’t conceal their exfiltration of data from their victims’ companies.”
Members of FIN9, including the defendants, obtained access to the computer networks of their victims’ companies through phishing campaigns or other methods including supply chain attacks.
The indictment details how after gaining access to company networks, the defendants used it to obtain non-public information, employee benefits, and funds.
The defendants also stole credit card information of employees and customers of the companies.
To hide their identities, the defendants registered online accounts at crypto exchanges in the names of individuals whose identities were stolen.
If convicted, the four face prison sentences on numerous charges ranging from five to 20 years.
US Attorney Philip R. Sellinger credited the FBI Newark Cyber Squad and Little Rock Cyber Squad for the arrests.