Malware targeting millions of people taken down by international coalition

Source: Eurojust

A global operation, supported by Eurojust, has led to the takedown of servers of infostealers, a type of malware used to steal personal data and conduct cybercrimes worldwide. The infostealers, RedLine and META, taken down today targeted millions of victims worldwide, making it one of the largest malware platforms globally. An international coalition of authorities from the Netherlands, the United States, Belgium, Portugal, the United Kingdom and Australia shut down three servers in the Netherlands, seized two domains, unsealed charges in the United States and took two people into custody in Belgium.

RedLine and Meta were able to steal personal data from infected devices. The data included saved usernames and passwords, and automatically saved form data, such as addresses, email addresses, phone numbers, cryptocurrency wallets, and cookies. After retrieving the personal data, the infostealers sold the information to other criminals through criminal market places. The criminals who purchased the personal data used it to steal money, cryptocurrency and to carry out follow-on hacking activities.

Investigations into RedLine and Meta started after victims came forward and a security company notified authorities about possible servers in the Netherlands linked to the software. Authorities discovered that over 1 200 servers in dozens of countries were running the malware. To take down the transnational malware, Eurojust coordinated cooperation between authorities from the Netherlands, the United States, Belgium, Portugal, United Kingdom and Australia. Through Eurojust, authorities were able to quickly exchange information and coordinate actions to take down the infostealers.

The take down of the infostealers took place on 28 October during a worldwide operation. Three servers were taken down in the Netherlands, two domains were seized, charges were unsealed in the United States and two people were taken into custody in Belgium. After the authorities obtained the data and took down the servers, a message was sent to the alleged perpetrators, including a video. The video sends a strong message to the criminals, showing that the international coalition of authorities was able to obtain crucial data on their network and will shut down their criminal activities. After the message was sent, Belgian authorities took down several Redline and Meta communication channels.

The authorities also retrieved a database of clients from RedLine and Meta. Investigations will now continue into the criminals using the stolen data.

For people concerned they may have fallen victim to RedLine and Meta, a private security company has launched an online tool to allow people to check if their data was stolen. The tool helps potential victims on the steps they need to take if their data has been stolen.

The following authorities were involved in the actions:

  • The Netherlands: National Police, Team Cybercrime Limburg, Public Prosecution Service
  • United States: Federal Bureau of Investigation; Naval Criminal Investigative Service; Internal Revenue Service Criminal Investigations; Department of Defense Criminal Investigative Service; Army Criminal Investigation Division
  • Belgium: Federal Prosecutor’s Office; Federal Police
  • Portugal: Polícia Judiciária
  • United Kingdom: National Crime Agency
  • Australia: Australian Federal Police

Stolen car parts worth millions of euros recovered

Source: Europol

German investigators had an initial breakthrough with the arrest and detention of two Romanian nationals following a series of break-ins in bakeries in Wallersdorf. Over the course of the investigation conducted by the Landshut Criminal Investigation Department, evidence emerged that one of the suspects, with the help of one other accomplice, was involved in the break-in at the Wallersdorf logistics…

New Exhibits at the National Cryptologic Museum: Unlock your Curiosity!

Source: National Security Agency NSA

From psychics to extraterrestrial communication, new temporary and permanent exhibits at the National Cryptologic Museum will have you scratching your head.

With exhibit labels like “Mind over Matter” and “What the What?”—museum visitors will go from, “What in the world?” to “What if?” The exhibits explore the extraordinary practice of using psychics to gain information from the enemy.

New Temporary Exhibits

 

Project Star Gate was used by the U.S. Government during the Cold War. Many of the psychic spies were at Ft. Meade, tasked with collecting intelligence, locating enemy agents and determining American vulnerabilities by using “remote viewing.” Remote viewing is mentally viewing a distant location they have never visited to gather insights on a person, site, or specific information. As outrageous as it sounds, the secret program was very successful and was in use until 1995.

A standout in the remote viewing field, Agent 001 of Project Star Gate Joe McMoneagle has been involved in over 200 intelligence missions utilizing his unique set of skills. His distinct collection of drawings (as a result of his remote viewing missions) were used to assist in combat and are a part of the current exhibit.

The exhibit even explores the brief moments in history that the U.S and Russia’s relationship wasn’t quite as contentious. See astounding sketches and the landscapes they match up to!

Plus, see the machine, altered by the mind to change its output! Don’t believe us? Come see for yourself, only at the NCM!

Psychics aren’t the only twilight zoneish content this fall.

SETI (The Search for Extraterrestrial Intelligence) also makes its debut at the NCM. The museum created a theatre room for guests to watch a video about the search for alien life and how researchers go under the sea to make connections.

Using anticryptography methods (a cryptographic message that is easy to decipher), the scientists detail their use of radio signals in their search for intelligent life in the universe. See a circuit board that digitized cosmic signals and more in the quest to communicate with alien life.

Be sure to plan your next visit soon as these temporary exhibits will only be on display through mid-December!

New Permanent Exhibits

 

The Museum has also added several permanent new exhibits as well.

The Language Whiteboard is a linguists’ delight!  It’s a compilation of all the languages we make use of at the agency. It came from the National Cryptologic University’s College of Language and Area Studies, where instructors created the artwork to use a teaching tool. It hung in a language classroom for many years before being “retired” to the National Cryptologic Museum.

While the museum has had several pieces of the Berlin Wall in its collection, the “You Are Leaving the American Sector” sign is a new addition. It was acquired by an American after the fall of the Berlin Wall. The iconic symbol of the Cold War is on display now.

The National Cryptologic Museum is open Mon-Sat from 10am-4pm. Admission is free, reservations are not required.  For more information on scheduling a visit or a field trip visit nsa.gov/museum/

Over EUR 14 million in counterfeit currency seized in operation targeting postal shipments

Source: Europol

During the operational phase, 174 parcels containing counterfeit currency were seized, triggering 144 new police investigations into the criminal networks responsible. A total of 148 130 counterfeit items were intercepted, including 134 949 euro banknotes and coins, 9 186 British pounds, and 3 595 US dollars.The vast majority of the seized items were altered-design banknotes, often referred to as ‘movie…

Two High-Profile Camorra Fugitives Arrested in Colombia Through International Cooperation

Source: Europol

The first fugitive, a senior cocaine broker linked to the Camorra syndicate, was apprehended in Medellin, Colombia, on 8 October. Having been in hiding for years, he was wanted on an Italian arrest warrant for his leading role in international drug trafficking operations spanning South America and Europe.The second fugitive, a high-ranking Camorra member, was arrested on 24 October, also…

NATO Secretary General’s statement on the deployment of DPRK troops to Russia

Source: NATO

On Monday, 28 October, a high-level delegation from the Republic of Korea will brief the North Atlantic Council on the Democratic People’s Republic of Korea’s (DPRK) troop deployment to Russia. Ambassadors from NATO’s Indo-Pacific partners – including Australia, Japan, New Zealand and the Republic of Korea – have been invited to attend. After the meeting, the NATO Secretary General will give a brief statement to the media in the doorstep area.

Media advisory

12:00 (CET)  Statement to the press by the NATO Secretary General
 

Media coverage

The Secretary General’s statement will be streamed live on the NATO website on EBU News Exchange.

The event is open to media with annual accreditation only. 

A security check will take place and all equipment and personal effects carried onto the site will be examined by security personnel and canine teams. Media representatives are therefore encouraged to arrive by 9:30 (CET), allowing for sufficient lead time for security proceedings.

Transcripts of the Secretary General’s remarks, as well as photographs, will be available on the NATO website. Video can be downloaded from the NATO Multimedia Portal after the event.

For more information:

For general queries: contact the NATO Press Office
Follow us on X: @NATO@SecGenNATO and @NATOPress

NATO tests integration of joint high-end maritime strike capabilities

Source: NATO

On 24 October 2024, NATO kicked-off “Neptune Strike 2024.” This enhanced vigilance activity will take place across Europe, from the central Mediterranean and Adriatic up to the North and Baltic Seas and will run until 31 October 2024. During this period, NATO will take operational control of cutting-edge maritime warfare capabilities from numerous Allies, including multiple aircraft carriers and expeditionary strike groups that will be deployed across several operational domains.

In total, some 20 surface vessels and submarines, along with special operations forces and numerous aircraft, are participating, with around 15.000 supporting personnel. Participating nations to this NATO deployment include Albania, Belgium, Canada, Finland, Germany, Greece, Italy, Lithuania, Netherlands, Norway, Portugal, Romania, Spain, Sweden, Türkiye, the United Kingdom, and the United States, a powerful demonstration of Allies’ ability to work together through NATO to deter and defend.

Read more from Allied Joint Force Command Brunssum

Read more from Naval Striking and Support Forces

Chair of the NATO Military Committee: ‘Finland will never again navigate the darkness alone.’

Source: NATO

On 24 and 25 October 2024 Chair of the NATO Military Committee Admiral Bauer visited Finland, upon the invitation of its Chief of Defence General Janne Jaakkola. Admiral Bauer’s visit underscored the value of Finland as a NATO Ally and the important contributions it provides to NATO’s deterrence and defence.

On Thursday 24 October, Admiral Bauer visited the Guards Jaeger Regiment and met with Finnish Defence Support Association members. This gave the opportunity to engage with members and meet current Finnish conscripts.

In the evening, Admiral Bauer addressed the Finnish National Defence Course Association. This association brings together leaders from across society Finnish society who complete a prestigious national course covering in-depth topics of security and defence. Admiral Bauer’s speech praised the spirit of resilience engraved in Finland’s national defence and emphasised what NATO can learn from Finland’s Comprehensive Security Strategy and Total Defence Concept. 

Admiral Bauer took the opportunity to discuss Finland’s transition to NATO membership, and looked ahead to the future of its membership in the Alliance. The Chair of the NATO Military Committee stated “Finland’s movement into NATO is a transition, not a transformation. It is an opportunity to inspire Allies, whilst embracing a posture of international resilience. I urge you all to hold the spirit of ‘sisu’ as a firebrand leading the way as you carve out this new path. Knowing that there are friends on either side. And that you need never again navigate the darkness alone.”

On Friday 25 October, Admiral Bauer met with Prime Minister Petteri Orpo, Minister of Foreign Affairs Elina Valtonen, Minister of Defence Anti Häkkänen and the Finnish Parliamentary Defence Committee. These engagements allowed Admiral Bauer the opportunity to discuss strategic developments in NATO’s deterrence and defence and the need for continued support for Ukraine. In his engagements with the Finnish political and military leadership, Admiral Bauer praised the strength that Finland’s membership brings to NATO. Admiral Bauer commended the synergy of Finland’s civilian and military infrastructures and sectors in contributing towards societal resilience. He also underscored the crucial role of defence industries in Allied deterrence and defence.

NATO Allies and experts discuss intensifying hybrid campaigns against the Alliance in Prague

Source: NATO

More than 100 Allied experts and representatives met at the NATO Hybrid Symposium in Prague, Czechia on 24-25 October to address the challenges posed by adversarial use of hybrid tactics. Participants discussed the worsening threat environment and how to strengthen NATO`s approach to countering hybrid threats and deter these threats more effectively.

Opening the conference alongside the Czech hosts, James Appathurai, NATO Deputy Assistant Secretary General for Innovation, Hybrid and Cyber, said: “This meeting comes at an important time. Russia in  particular is stepping up hybrid attacks against NATO Allies. Our partners are also experience increased hostile grey zone activities by various actors. This meeting will help us improve our assessment of the threats, and step up our resilience, defence and deterrence against hybrid threats’’.  

The Symposium also had sessions with representatives from private sector and academia as well as from NATO partners such as the European Union, Ukraine and Japan to explore their experience in countering hybrid interference. The annual event offers an opportunity for the Allied hybrid community to foster cooperation among experts and exchange views and best practices. The event was co-organised with the Ministry of Defence of the Czech Republic and the Ministry of Foreign Affairs of the Czech Republic.  

Criminal network that manufactured narco-boats to smuggle drugs dismantled

Source: Eurojust

The criminal group set up several warehouses in Spain and Portugal where boats that are illegal in Spain were manufactured in Portugal. The boats were then sold to other criminal groups, who used them to transport drugs such as heroin and marijuana into Spain. The criminal group also used its own boats and crews to transport drugs to Spain.

The authorities began investigating the criminal organisation at the end of 2022, when they learned of the group’s production and sale of narco-boats. As the group was active in Portugal and Spain, an international operation was required to stop the criminals in their tracks. A joint investigation team (JIT) was set up at Eurojust, to enable Portuguese and Spanish authorities to investigate the organisation together.

The JIT allowed the authorities to exchange information and evidence directly and quickly, to cooperate in real time and to jointly carry out operations. Due to this cooperation, coordinated by Eurojust, all the members of the group were identified and enough evidence was gathered to launch an international operation that dismantled the criminal group.

During the action day in Portugal and Spain, the authorities intercepted two boats with drugs before they could depart. The operation that deployed 200 agents led to the arrest of 28 suspects in Spain. Authorities seized 23 kilos of heroin, two marijuana plantations, four narco-boats and more than EUR 150 000 in cash.

The following authorities were involved in the operations:

  • Portugal: PPO Viana do Castelo; Policia Judiciária
  • Spain: Juzgado de Instruccion num. 2 of Cambados, Galicia; PP Antudrug Pontevedra; EDOA Group of Guardia Civil