This article is from the source 'independent' and was first published or seen on . It last changed over 40 days ago and won't be checked again for changes.
You can find the current article at its original source at http://www.independent.co.uk/news/uk/crime/gang-tried-to-trick-victims-by-posing-as-medics-and-telling-them-they-had-cancer-in-20m-cyber-heist-a6694121.html
The article has changed 3 times. There is an RSS feed of changes available.
| Version 0 | Version 1 |
|---|---|
| Gang tried to trick victims by posing as medics and telling them they had cancer in £20m bank cyber heist | Gang tried to trick victims by posing as medics and telling them they had cancer in £20m bank cyber heist |
| (1 day later) | |
| An Eastern European criminal gang behind a £20m hi-tech heist on British banks planned to trick victims into exposing their financial details by pretending to be medics and telling them they had cancer, the US authorities have revealed. | An Eastern European criminal gang behind a £20m hi-tech heist on British banks planned to trick victims into exposing their financial details by pretending to be medics and telling them they had cancer, the US authorities have revealed. |
| The “tightly-knit” group of cybercriminals sent hundreds of thousands of infected emails to unsuspecting customers that allowed them to steal private banking information and use it to transfer millions of pounds from Britain to accounts in Russia, the Ukraine and Belarus. | The “tightly-knit” group of cybercriminals sent hundreds of thousands of infected emails to unsuspecting customers that allowed them to steal private banking information and use it to transfer millions of pounds from Britain to accounts in Russia, the Ukraine and Belarus. |
| It is suspected that a criminal group hired a Moldovan computer expert Andrey Ghinkul – known as Smilex - to run the scam, who was arrested while on holiday in Cyprus in August. | It is suspected that a criminal group hired a Moldovan computer expert Andrey Ghinkul – known as Smilex - to run the scam, who was arrested while on holiday in Cyprus in August. |
| Mr Ghinkul was described as the leader of a group that included four other Russian-based criminals who infected hundreds of thousands of computers worldwide, according to US court documents. Britain was particularly targeted in the scam, according to experts. | Mr Ghinkul was described as the leader of a group that included four other Russian-based criminals who infected hundreds of thousands of computers worldwide, according to US court documents. Britain was particularly targeted in the scam, according to experts. |
| Swimmers prepare to take part in the annual Christmas Day Peter Pan Cup handicap race in the Serpentine River, in Hyde Park, London, | |
| Reuters | |
| A butcher holds up cuts of meat to be sold during the annual Christmas Eve auction at Smithfield Market in central London | |
| Actresses rush backstage to get changed during a performance of Jack and the Beanstalk at Hackney Empire London. The popular pantomime play is showing at the venue until 3rd January 2016. | |
| People cross a bridge in St James's Park in London. Large parts of Britain have enjoyed unseasonably warm weather today as forecasters have announced that they expect it to continue into next week | |
| People gather to take a selfie photograph as pagans and revelers gather at Stonehenge, hoping to see the sun rise, as they take part in a winter solstice ceremony at the ancient neolithic monument of Stonehenge near Amesbury, Wiltshire. Despite a forecast for rain, a large crowd gathered at the famous historic stone circle, a UNESCO listed ancient monument, to celebrate the sunrise closest to the Winter Solstice, the shortest day of the year. The event is claimed to be more important in the pagan calendar than the summer solstice, because it marks the 're-birth' of the Sun for the New Year. | People gather to take a selfie photograph as pagans and revelers gather at Stonehenge, hoping to see the sun rise, as they take part in a winter solstice ceremony at the ancient neolithic monument of Stonehenge near Amesbury, Wiltshire. Despite a forecast for rain, a large crowd gathered at the famous historic stone circle, a UNESCO listed ancient monument, to celebrate the sunrise closest to the Winter Solstice, the shortest day of the year. The event is claimed to be more important in the pagan calendar than the summer solstice, because it marks the 're-birth' of the Sun for the New Year. |
| An employee sorts deliveries at Royal Mail's Mount Pleasant Mail Center in London. This week is expected to be the busiest of the year for Royal Mail as they deal with deliveries in the run up to Christmas. | An employee sorts deliveries at Royal Mail's Mount Pleasant Mail Center in London. This week is expected to be the busiest of the year for Royal Mail as they deal with deliveries in the run up to Christmas. |
| London buses pass under Christmas lights on Oxford Street in central London, on the final shopping Sunday before Christmas. | London buses pass under Christmas lights on Oxford Street in central London, on the final shopping Sunday before Christmas. |
| AFP | AFP |
| A supporter wears a t-shirt featuring the face of Chelsea's former Portuguese manager Jose Mourinho before the English Premier League football match between Chelsea and Sunderland at Stamford Bridge | A supporter wears a t-shirt featuring the face of Chelsea's former Portuguese manager Jose Mourinho before the English Premier League football match between Chelsea and Sunderland at Stamford Bridge |
| AFP/Getty | AFP/Getty |
| Josh Clewley harvests Brussels sprouts at Essington Fruit Farm in Wolverhampton for the Christmas market | Josh Clewley harvests Brussels sprouts at Essington Fruit Farm in Wolverhampton for the Christmas market |
| Armed police stand guard outside Number 10 Downing Street in London as security across the city has tightened in the run up to Christmas | Armed police stand guard outside Number 10 Downing Street in London as security across the city has tightened in the run up to Christmas |
| Deborah McGibbney (left) and Nishma Rana, employees at Royal Mail's Glasgow Mail Centre, wear Santa hats as they help to handle millions of items during the Christmas rush on the centre's busiest day of the year | Deborah McGibbney (left) and Nishma Rana, employees at Royal Mail's Glasgow Mail Centre, wear Santa hats as they help to handle millions of items during the Christmas rush on the centre's busiest day of the year |
| Farmer Harvey Maunder walks with his flock of free-range geese that he has reared for the Christmas table, in front of the farmhouse at Home Farm in the village of Kingsweston near Somerton. The birds, which have been reared as free-range from chicks and have already broken out to eat Mrs Maunder's Christmas sprouts, are due to be dispatched and prepared for the farm shop's customers | Farmer Harvey Maunder walks with his flock of free-range geese that he has reared for the Christmas table, in front of the farmhouse at Home Farm in the village of Kingsweston near Somerton. The birds, which have been reared as free-range from chicks and have already broken out to eat Mrs Maunder's Christmas sprouts, are due to be dispatched and prepared for the farm shop's customers |
| Ascot Racecourse has unveiled the ‘foursie’ – a festive onesie tailor-made for Shetland pony, Daffy. The foursie has been made to keep Daffy warm as the cold winter approaches. Ascot is encouraging race goers to don their festive finery ahead of its Christmas Racing Weekend which takes place on the 18 and 19 December, with racegoers encouraged to donate to a host of local good causes | Ascot Racecourse has unveiled the ‘foursie’ – a festive onesie tailor-made for Shetland pony, Daffy. The foursie has been made to keep Daffy warm as the cold winter approaches. Ascot is encouraging race goers to don their festive finery ahead of its Christmas Racing Weekend which takes place on the 18 and 19 December, with racegoers encouraged to donate to a host of local good causes |
| Oxford's 'Business' (left) and 'Pleasure' (right, white arms) pass the Harrod's Depository during the BNY Mellon University Boat Race Trial 8's on The River Thames in London | Oxford's 'Business' (left) and 'Pleasure' (right, white arms) pass the Harrod's Depository during the BNY Mellon University Boat Race Trial 8's on The River Thames in London |
| Demonstrators wave a Syrian flag during a Stop The War Coalition protest as protesters march along Whitehall in London | Demonstrators wave a Syrian flag during a Stop The War Coalition protest as protesters march along Whitehall in London |
| Royal British Legion standard bearers march ahead of the hearse at the funeral service for 90-year old World War Two veteran Thomas Cox in Middlesbrough. Following an appeal on social media hundreds of people attended the service for the World War Two veteran from Stockton who served with the Royal Pioneer Corps and who died recently without any family members being able to be found | Royal British Legion standard bearers march ahead of the hearse at the funeral service for 90-year old World War Two veteran Thomas Cox in Middlesbrough. Following an appeal on social media hundreds of people attended the service for the World War Two veteran from Stockton who served with the Royal Pioneer Corps and who died recently without any family members being able to be found |
| John Lewis’s Christmas tree farm, Netherraw Forestry in Scotland, is set for a busy festive season as the retailer reveals a huge surge in demand for real Christmas trees | John Lewis’s Christmas tree farm, Netherraw Forestry in Scotland, is set for a busy festive season as the retailer reveals a huge surge in demand for real Christmas trees |
| Model makers Hannah Reed (left) and Amanda Green put the finishing touches to a huge 6.7kg Lego Angel which is on top of a giant 8m tall Christmas tree made of Lego bricks at the Legoland Windsor Resort in Berkshire | Model makers Hannah Reed (left) and Amanda Green put the finishing touches to a huge 6.7kg Lego Angel which is on top of a giant 8m tall Christmas tree made of Lego bricks at the Legoland Windsor Resort in Berkshire |
| St Paul's Choristers prepare to sing during a rehearsal at St Paul's Cathedral in London. It is estimated that on the 23rd, 24th and 25th of December alone, more than 10,000 people will come through the doors of St Paul's for Christmas services | St Paul's Choristers prepare to sing during a rehearsal at St Paul's Cathedral in London. It is estimated that on the 23rd, 24th and 25th of December alone, more than 10,000 people will come through the doors of St Paul's for Christmas services |
| Christmas shoppers browse stalls at the traditional Christmas market close to the historic Roman Baths and Bath Abbey in Bath | Christmas shoppers browse stalls at the traditional Christmas market close to the historic Roman Baths and Bath Abbey in Bath |
| The Boy Choristers of Winchester Cathedral Choir skate on the Cathedral's ice rink which will be open until the 3rd of January | The Boy Choristers of Winchester Cathedral Choir skate on the Cathedral's ice rink which will be open until the 3rd of January |
| Shop workers clear rubbish from a store in Cockermouth, northern England, following heavy flooding in the town. Thousands of homes and business were affected by the heavy rains and strong winds that battered Britain over the weekend, with one death reported in London after a man was blown into the path of a bus, police said | Shop workers clear rubbish from a store in Cockermouth, northern England, following heavy flooding in the town. Thousands of homes and business were affected by the heavy rains and strong winds that battered Britain over the weekend, with one death reported in London after a man was blown into the path of a bus, police said |
| A rescue team helps to evacuate people from their homes after Storm Desmond caused flooding in Carlisle. Storm Desmond has brought severe disruption to areas of northern England as dozens of flood warnings remain in place | A rescue team helps to evacuate people from their homes after Storm Desmond caused flooding in Carlisle. Storm Desmond has brought severe disruption to areas of northern England as dozens of flood warnings remain in place |
| Chickens wander around within the 'Grow Heathrow' protest camp, in Sipson, near Heathrow airport . The residents of the camp aim to stop or disrupt the proposed development of an extra runway at the airport due to the impact it would have on the environment and the lives of local residents. Members of the community fear that the village of Harmondsworth would be the location of the runway, meaning that many family homes would be either demolished or made unuseable | Chickens wander around within the 'Grow Heathrow' protest camp, in Sipson, near Heathrow airport . The residents of the camp aim to stop or disrupt the proposed development of an extra runway at the airport due to the impact it would have on the environment and the lives of local residents. Members of the community fear that the village of Harmondsworth would be the location of the runway, meaning that many family homes would be either demolished or made unuseable |
| A new statue of the Beatles is unveiled by John Lennon's sister Julia Baird (not pictured) outside the Liverbuilding, in Liverpool | A new statue of the Beatles is unveiled by John Lennon's sister Julia Baird (not pictured) outside the Liverbuilding, in Liverpool |
| A Tornado jet ahead of taking off from RAF Lossiemouth in Scotland, as RAF Tornado jets carried out the first British bombing runs over Syria, the Ministry of Defence has confirmed. The air strikes were carried out within hours of a vote by MPs in the Commons to back extending operations against Isis from neighbouring Iraq | A Tornado jet ahead of taking off from RAF Lossiemouth in Scotland, as RAF Tornado jets carried out the first British bombing runs over Syria, the Ministry of Defence has confirmed. The air strikes were carried out within hours of a vote by MPs in the Commons to back extending operations against Isis from neighbouring Iraq |
| Eric Marshall (75) turns on his Christmas lights at his home in Bagby, North Yorkshire which took four weeks to install | Eric Marshall (75) turns on his Christmas lights at his home in Bagby, North Yorkshire which took four weeks to install |
| The giant sugar statues created by SodaStream went on display in front of the Houses of Parliament to mark National Sugar Awareness Week. The statues were made using the total amount of sugar from fizzy drinks consumed every minute by children, teenagers and adults in the UK | The giant sugar statues created by SodaStream went on display in front of the Houses of Parliament to mark National Sugar Awareness Week. The statues were made using the total amount of sugar from fizzy drinks consumed every minute by children, teenagers and adults in the UK |
| Marvel UK has unveiled an Ant Sized Street View platform that gives Brits an insects view point of the capital, to mark today’s Ant-Man DVD release. The interactive #AntSizedStreetView platform, allows fans to explore some of the city’s best known sights | Marvel UK has unveiled an Ant Sized Street View platform that gives Brits an insects view point of the capital, to mark today’s Ant-Man DVD release. The interactive #AntSizedStreetView platform, allows fans to explore some of the city’s best known sights |
| Climate change demonstrators march to demand curbs to carbon pollution in London, on the eve of the climate summit in Paris | Climate change demonstrators march to demand curbs to carbon pollution in London, on the eve of the climate summit in Paris |
| The gang’s ability to steal the money depended on unwitting victims clicking on email attachments that contained the malware [malicious software] – known as Dridex - which sat on the computer until online banking sites were used. | The gang’s ability to steal the money depended on unwitting victims clicking on email attachments that contained the malware [malicious software] – known as Dridex - which sat on the computer until online banking sites were used. |
| It allowed the conspirators to capture banking details or even hijack the computer session to present a fake online banking webpage to collect personal information. | It allowed the conspirators to capture banking details or even hijack the computer session to present a fake online banking webpage to collect personal information. |
| The spam emails sent included some suggesting that a package had been sent, or by informing the user that a large sum of money had been transferred to their accounts. But during a chat conversation on the internet, Mr Ghinkul, 30, in March 2014, allegedly told another member of the gang of the cancer” plan, according to indictment released by the US authorities. | The spam emails sent included some suggesting that a package had been sent, or by informing the user that a large sum of money had been transferred to their accounts. But during a chat conversation on the internet, Mr Ghinkul, 30, in March 2014, allegedly told another member of the gang of the cancer” plan, according to indictment released by the US authorities. |
| The plan was that “the purported originator of the email was a medical institution and that the victim recipient had tested positive for cancer”, according to the document. It was not clear if the tactic had been used. | The plan was that “the purported originator of the email was a medical institution and that the victim recipient had tested positive for cancer”, according to the document. It was not clear if the tactic had been used. |
| “They were opportunistic and used any means to get people to inadvertently install malware so they could steal money,” said Don Smith, Technology Director at Dell SecureWorks which cracked open the fraud. “They would use any ploy – however weird or wacky – to persuade people to do that.” | “They were opportunistic and used any means to get people to inadvertently install malware so they could steal money,” said Don Smith, Technology Director at Dell SecureWorks which cracked open the fraud. “They would use any ploy – however weird or wacky – to persuade people to do that.” |
| Details of the case emerged after the FBI, the National Crime Agency (NCA) and private security firms revealed their role in taking down the cyber scam described by one US attorney as “one of the most pernicious malware threats in the world”. | Details of the case emerged after the FBI, the National Crime Agency (NCA) and private security firms revealed their role in taking down the cyber scam described by one US attorney as “one of the most pernicious malware threats in the world”. |
| The NCA have declined to name the banks hit by the fraud in Britain because the institutions feared reputational damage from the incident. It said that the £20 million figure could rise. | The NCA have declined to name the banks hit by the fraud in Britain because the institutions feared reputational damage from the incident. It said that the £20 million figure could rise. |
| The Moldovan kingpin and the Russians – named in court documents and known by their online monikers as “nintutu”, “caramba” and “aqua” – ran a sophisticated operation using false identities, anonymous internet-based payment systems and a network of money mules to launder the funds during the cyber bank jobs, according to US court documents. | The Moldovan kingpin and the Russians – named in court documents and known by their online monikers as “nintutu”, “caramba” and “aqua” – ran a sophisticated operation using false identities, anonymous internet-based payment systems and a network of money mules to launder the funds during the cyber bank jobs, according to US court documents. |
| During its online investigation, the FBI found discovered an email account attributed to Mr Ghinkul in which he appeared to have sent himself a version of the malware. | During its online investigation, the FBI found discovered an email account attributed to Mr Ghinkul in which he appeared to have sent himself a version of the malware. |
| During online chats using the instant messaging service jabber, he suggests that he is struggling to infect computers using the email technique and asked for help from other criminals, according to the US court papers. | During online chats using the instant messaging service jabber, he suggests that he is struggling to infect computers using the email technique and asked for help from other criminals, according to the US court papers. |
| Mr Ghinkul had been staying in the coastal Cypriot city of Paphos when he was arrested, and claimed that he had travelled there because his daughter had a health condition that was helped by the warm weather. He had visited France, Poland and Romania, according to the Cyprus Mail, before he travelled to the island to stay in the £1,200-a-week Meltemi Villas Resort, where each villa has its own private swimming pool. | Mr Ghinkul had been staying in the coastal Cypriot city of Paphos when he was arrested, and claimed that he had travelled there because his daughter had a health condition that was helped by the warm weather. He had visited France, Poland and Romania, according to the Cyprus Mail, before he travelled to the island to stay in the £1,200-a-week Meltemi Villas Resort, where each villa has its own private swimming pool. |
| He was remanded in custody after the Cypriot authorities turned down his request that he be freed on 20,000 euro bail. Prosecutors said that in the past suspects had fled by private jet or yacht when facing extradition hearings. | He was remanded in custody after the Cypriot authorities turned down his request that he be freed on 20,000 euro bail. Prosecutors said that in the past suspects had fled by private jet or yacht when facing extradition hearings. |
| Days after his arrest, The NCA launched the operation to intercept communications between infected computers and the gang. It said it expected further arrests. | Days after his arrest, The NCA launched the operation to intercept communications between infected computers and the gang. It said it expected further arrests. |
| The US is seeking Mr Ghinkul’s extradition to stand trial for a sophisticated operation that also netted the gangsters $10m from institutions in the United States. | The US is seeking Mr Ghinkul’s extradition to stand trial for a sophisticated operation that also netted the gangsters $10m from institutions in the United States. |
| The targets for the scam in the United States included an oil company, a school district and two banks, according to papers released in the United States. The member of staff of the oil company, Penneco Oil, unwittingly downloaded the malware on to a company computer which resulted in $3.5m (£2.3m) to be transferred in two separate tranches to accounts in Russia and Belarus. | The targets for the scam in the United States included an oil company, a school district and two banks, according to papers released in the United States. The member of staff of the oil company, Penneco Oil, unwittingly downloaded the malware on to a company computer which resulted in $3.5m (£2.3m) to be transferred in two separate tranches to accounts in Russia and Belarus. |
| Executive Assistant Director Robert Anderson, from the FBI, said: “Cyber criminals often reach across international borders, but this operation demonstrates our determination to shut them down no matter where they are.” | Executive Assistant Director Robert Anderson, from the FBI, said: “Cyber criminals often reach across international borders, but this operation demonstrates our determination to shut them down no matter where they are.” |
| The Dridex banking trojan, that breached the security of computers in 27 countries, was one of a number of criminal projects that filled the void after a multinational police operation against the Gameover Zeus operation in 2014. Gameover Zeus – which operated in a similar way to Dridex – was estimated by the FBI to have netted more than US$100m. | The Dridex banking trojan, that breached the security of computers in 27 countries, was one of a number of criminal projects that filled the void after a multinational police operation against the Gameover Zeus operation in 2014. Gameover Zeus – which operated in a similar way to Dridex – was estimated by the FBI to have netted more than US$100m. |
| The alleged mastermind of that operation, Evgeniy Mikhailovich Bogachev, remains at large and is believed to be in Russia. He is on the FBI’s list of most wanted cybercriminals with a reward of $3m for information leading to his arrest. Experts said that Dridex failed to match the sophistication, size and criminal success of Gameover Zeus. | The alleged mastermind of that operation, Evgeniy Mikhailovich Bogachev, remains at large and is believed to be in Russia. He is on the FBI’s list of most wanted cybercriminals with a reward of $3m for information leading to his arrest. Experts said that Dridex failed to match the sophistication, size and criminal success of Gameover Zeus. |