Threat Source newsletter (April 13, 2023) — Dark web forum whac-a-mole

Summary: The FBI announced on March 23 that it disrupted the BreachForums cybercriminal marketplace and arrested a 20-year-old suspected of being its founder and main administrator, and international agencies working as "Operation Cookie Monster" then took down Genesis Market, arresting dozens of suspected users and administrators. The U.S. Department of Justice estimated Genesis Market sold data on more than 1.5 million compromised computers containing over 80 million account access credentials, while the FBI said BreachForums had 340,000 members at the time of its takedown and reporting stated Genesis Market had 59,000 registered users.
Key Takeaway: No agency can arrest 340,000 people, so even with administrators restricted from the internet, the remaining user base will look for a new home - and Emotet, disrupted in March 2021, was rebooted as recently as last month, with RaidForums, a forefather of BreachForums, disrupted in April 2022.

Read the original at Cisco Talos ↗

Topics: Cybercrime & Law Enforcement
Mentions: CVE-2022-37969 CVE-2023-28252
Related: Microsoft Patch Tuesday for April 2023 — Snort rules and prominent vulnerabilities Cyber Risks ·
Microsoft (& Apple) Patch Tuesday, April 2023 Edition Cyber Risks ·
CVE-2023-28252: Microsoft Windows Common Log File System (CLFS) Driver Privilege Escalation Vulnerability Known Exploited Vulnerabilities · Apr 11, 2023