The Department of Justice seized popular online cybercriminal marketplace RaidForums, according to recently unsealed criminal charges against the website’s founder, Diogo Santos Coelho.
The takedown, which DOJ announced Tuesday, is the latest massive sweep by the U.S. government and international law enforcement partners of online marketplaces where hackers buy and sell data. RaidForums boasted at one point of having close to 10 billion pieces of personally identifiable information for sale, making it one of the biggest destinations for cybercriminals.
According to the affidavit filed by law enforcement, RaidForums operated from around 2016 through Feb. 22 of this year as a massive online marketplace for individuals to buy and sell hacked and stolen data, including sensitive personal and financial information from victims in the United States. Among those sales included leaked data from 178 million Facebook users.
“The takedown of this online market for the resale of hacked or stolen data disrupts one of the major ways cybercriminals profit from the large-scale theft of sensitive personal and financial information,” said Assistant Attorney General Kenneth Polite Jr. of the Justice Department’s Criminal Division.
According to court documents, as a part of the investigation, law enforcement obtained a copy of the backend of RaidForums’ database, granting them a treasure trove of information on forum members including account registration information, user IP addresses and private messages with other members.
The court records confirm suspicions from researchers that the sudden shuttering of RaidForums in February was the work of law enforcement. At that time, no parties took responsibility for the shutdown and researchers later found a relaunched version of the website.
The takedown was the result of a joint law enforcement effort coordinated by Europol and involving United States, United Kingdom, Sweden, Portugal and Romania.
Coelho, 21, was arrested in the United Kingdom on Jan. 31, at the United States’ request and remains in custody pending extradition. The Portuguese national faces six counts in relation to his role in running the forum including conspiracy, access device fraud and aggravated identify theft. Coelho profited from the forum by charging membership prices or users as well as acting as an intermediary between buyers, authorities said.
The RaidForums takedown is a part of an ongoing effort by international law enforcement to take out infrastructure cybercriminals use to make and launder profits. Last week German authorities took down another major online crime marketplace, the dark web market Hydra.
