The US Department of Justice has charged four Vietnamese individuals for their roles in cyberattacks that resulted in over $71 million in losses to US companies. The accused, Nguyen Viet Quoc, Ta Van Tai, Nguyen Van Truong, and Nguyen Trang Xuyen, are alleged members of the cybercrime group FIN9. Between May 2018 and October 2021, they reportedly used phishing and supply chain attacks to breach the networks of various businesses, stealing sensitive information and funds.
The hackers gained initial access to their victims’ networks through phishing and compromised third-party vendors. Once inside, they targeted employee benefit programs and redirected digital benefits, including gift cards, to accounts controlled by the attackers. Additionally, they exfiltrated personally identifiable information and credit card details, which were used to register online accounts and facilitate fraudulent transactions.
The indictment outlines charges against the defendants for conspiracy to commit fraud, extortion, and related computer crimes. Tai, Xuyen, and Truong also face charges for money laundering, while Tai and Quoc are additionally charged with aggravated identity theft. The group is accused of selling stolen gift cards through social media and cryptocurrency marketplaces.
US Attorney Philip R. Sellinger emphasized the severity of the FIN9 group’s actions, describing them as “prolific international hackers” who exploited various methods to commit fraud while obscuring their identities. The charges highlight ongoing efforts to address sophisticated cybercrime operations targeting major businesses.
Reference:
