Four alleged members of the long‑running cybercrime group FIN9 have been charged in the United States for a multi‑year hacking campaign that prosecutors say stole more than $71 million from U.S. companies and their employees. According to an indictment unsealed by the U.S. Attorney’s Office for the District of New Jersey, the defendants – all Vietnamese nationals – allegedly breached corporate networks between May 2018 and October 2021, targeting employee benefit systems, gift cards, and payment data, and then monetising the haul via cryptocurrency channels. Prosecutors allege that FIN9 members Ta Van Tai, Nguyen Viet Quoc, Nguyen Trang Xuyen, and Nguyen Van Truong gained access to victim networks using phishing campaigns and supply chain attacks, then moved laterally inside those environments to harvest non‑public information, divert digital employee benefits (including gift cards), and steal personal and payment card data from employees and customers. Stolen gift cards were allegedly resold through accounts on peer‑to‑peer cryptocurrency marketplaces opened with fake or stolen identities, while other stolen personal data was used to register accounts at cryptocurrency exchanges and hosting providers to obfuscate the group’s activities. The case highlights FIN9 as a financially motivated group associated with “high‑impact intrusions” against a wide range of U.S. industries, including technology, manufacturing, and financial services. The defendants face multiple counts, including conspiracy to commit fraud and related computer activity, conspiracy to commit wire fraud, intentional damage to protected computers, conspiracy to commit money laundering, aggravated identity theft, and conspiracy to commit identity fraud, exposing them to potential sentences ranging from five to twenty years on various counts, plus mandatory additional time on the aggravated identity theft charges if convicted. The investigation is led by the FBI’s Newark and Little Rock cyber squads, underscoring U.S. law enforcement’s growing focus on cross‑border, crypto‑linked cybercrime.

AI-generated background, compiled from web sources — not editorial content.

More coverage

Explore the topic

More on Hacking

Comments