The United States has unveiled sanctions and indictments targeting two top Russian hackers associated with the notorious Joker’s Stash and Cryptex networks, according to announcements made by the U.S. Department of Justice (DOJ).
An indictment against 38-year-old Timur Kamilevich Shakhmametov, from Novosibirsk, Russia, for allegedly operating a now-defunct carding shop Joker’s Stash, was unsealed by the DOJ. The man reportedly generated revenues upwards of $280 million, with potential earnings exceeding $1 billion.
Joker’s Stash sold cards stolen in U.S. retailers breaches, including Saks Fifth Avenue, Lord and Taylor, Bebe Stores, Hilton Hotels, Jason’s Deli, Whole Foods, Chipotle, Wawa, Sonic Drive-In, the Hy-Vee supermarket chain, Buca Di Beppo, and Dickey’s BBQ.
Shakhmametov is also listed in Russian incorporation documents as the owner of Arpa Plus, a Novosibirsk company that makes mobile games.
Shakhmametov, also known as “Vega,” rose to infamy by selling stolen payment card data and mastering “unlimited cashouts,” a sophisticated scheme for withdrawing large sums from hacked accounts.
His operations provided high-roller clientele with fresh payment card data, earning Joker’s Stash a reputation for reliability and customer satisfaction until its closure in January 2021 amid server seizures and a COVID-19-related disruption.
Furthermore, the U.S. has sanctioned Taleon, a prominent figure the US government suspects is behind the Cryptex cryptocurrency exchange, identified as one of Russia’s leading money laundering networks.
Sergey Sergeevich Ivanov, 44, of Saint Petersburg, Russia, known as Taleon, is accused of facilitating money laundering operations for multiple cybercrime entities, including ransomware actors and darknet marketplaces.
The U.S. Department of State is offering a reward of up to $10 million each for information leading to the arrests and/or convictions of Shakhmametov and Ivanov.