Russian National Sentenced to 40 Months in Prison for Selling 297,000+ Stolen Credentials
Published on August 15, 2024
- A Russian citizen was sentenced to 40 months in prison for selling stolen user information on the criminal internet marketplace Slilpp.
- The individual was extradited to the U.S. in 2021 and pleaded guilty to conspiracy to commit bank and wire fraud.
- The sold exfiltrated credentials also got him to pay more than $1.2 in restitution.
Georgy Kavzharadze, a 27-year-old Russian national from Moscow, was sentenced to 40 months in prison for selling stolen financial data, login credentials, and other personally identifying information (PII) on the largest online marketplace of stolen logins, Slilpp, a press release from the U.S. Department of Justice said.
Kavzharadze, also known as TeRorPP, Torqovec, and PlutuSS, was charged with conspiracy to commit bank fraud and wire fraud, access device fraud, and aggravated identity theft in August 2021 and was subsequently extradited to the U.S.
The individual pleaded guilty in a U.S. court on February 16, 2024, to conspiracy to commit bank fraud and wire fraud and was ordered to pay north of $1,233,500 in restitution.
In May 2021, the accused listed 240,495 login credentials for sale. These user credentials could be leveraged to steal online payment and bank account funds, including access to accounts with banks in New York, California, Nevada, and Georgia.
From July 2016 to May 2021, Kavzharadze advertised having more than 626,100 stolen login credentials, and the over 297,300 sold ones were linked to approximately $1.2 million in fraudulent or attempted transactions.
The cybercriminal accepted Bitcoin and was connected to withdrawals of more than $200,000 in Slilpp profits.
The FBI seized Slilpp infrastructure and domain names in June 2021. The Slilpp database contained data on Slilpp vendors, customers, and transactions, including accurate subscriber and payment information for individual accounts.
In other news, a Belarusian-Ukrainian cybercriminal known online as “J.P. Morgan” who ran international ransomware campaigns and wire fraud schemes faces decades in prison in the U.S. after being extradited from Poland on August 9.