Authorities have been successful in disrupting and dismantling two well-known online cybercrime marketplaces, Cracked and Nulled, which had been active since 2016. This effort was part of Operation Talent, a multinational initiative aimed at targeting platforms trafficking in stolen login credentials, hacking tools, and various illicit products. The operation spanned across multiple countries, including the United States, Romania, Australia, France, Germany, Spain, Italy, and Greece. These actions have led to the seizure of servers and domain names associated with these marketplaces, aiming to disrupt the criminal trade that has impacted millions of individuals, with an estimated 17 million people in the United States alone affected by cybercrimes related to these platforms.
Cracked, one of the primary targets of Operation Talent, was an online marketplace operational since March 2018 with over 4 million users. The platform was involved in selling stolen login credentials, hacking tools, malware hosting services, and other cybercrime products. With more than 28 million posts on the platform, Cracked generated approximately $4 million in revenue through trafficking in stolen data, enabling cybercriminals to engage in fraudulent schemes. One disturbing case involved cyberstalking and sextortion in the Western District of New York, where a criminal accessed a victim’s personal credentials through the platform to send threatening messages, showcasing the harmful applications of Cracked’s offerings.
To combat such incidents, the FBI, in collaboration with international partners, identified and seized servers and domain names linked to the Cracked infrastructure. This operation aimed to disrupt the platform’s operations, including servers used for payment processing through Sellix and related hosting services. With law enforcement actions taken, anyone attempting to access the seized domains will encounter a seizure banner alerting them to the legal measures in place.
Simultaneously, the U.S. Justice Department announced the seizure of the Nulled marketplace domain and unveiled criminal charges against Lucas Sohn, one of its key administrators. Nulled, active since 2016 with over 5 million users, was responsible for selling stolen login credentials, personal identification documents, and hacking tools. The marketplace generated approximately $1 million annually, allowing criminals to conduct illicit activities with ease. Notably, a database containing the names and social security numbers of 500,000 U.S. citizens was sold through Nulled, emphasizing the scale of identity theft facilitated by the platform.
Lucas Sohn, a key administrator for Nulled, processed transactions and acted as an intermediary for users engaged in cybercrime activities. Sohn faces charges including conspiracy to traffic in passwords, identity fraud, and access device fraud, with potential lengthy prison sentences if convicted. The global nature of the cybercrime threat is highlighted by the collaborative efforts of international law enforcement agencies in addressing the issue. Investigative teams from various countries joined forces with the FBI to disrupt the Cracked and Nulled marketplaces, seizing critical cybercrime infrastructure and arresting key figures involved in these illicit activities.
The operation serves as a significant step toward curbing the global trade in stolen data and hacking tools, emphasizing the widespread use of such platforms in criminal enterprises. It also underscores the ongoing commitment of international entities to combat online cybercrime, providing a clear message to cybercriminals that engaging in illegal activities within these marketplaces carries risks. Through operations like Operation Talent, authorities are warning potential exploiters of similar platforms about the consequences of using them for criminal purposes.