Feds help bag international malware platform

Working with other nations, the FBI helped take down a international criminal infrastructure platform that has been spewing malware and ransomware since 2009.

world map

The FBI, acting as part of an international law enforcement coalition, has taken down a major international cybercriminal platform.

Europol said on Dec. 1 that the international coalition’s enforcement operation resulted in five arrests, the seizure of 39 web servers, along with almost a million web domains. The assets, according to Europol, were used to launch and manage mass global malware attacks and money mule recruiting campaigns.

The cyberattacks originated from the “Avalanche” platform, said the international law enforcement organization, and caused millions in damages to online banking systems in Germany alone. The platform had been in operation since 2009 and the arrests and seizures were the result of a four-year-long investigation.

Separately, the U.S. recently marked up a success of its own in preventing a ransomware attack on some Treasury Department offices, according to the White House’s top information security officer.

According to Federal CISO Greg Touhill, two employees at a Treasury Department bureau were recently targeted by ransomware that had been circulating through the financial services community.

In remarks at a Dec. 2 AFCEA NOVA lunch presentation, Touhill said the department detected, neutralized and restored the network at the two remote bureaus -- proof, he suggested, that federal agencies are becoming more resilient in the face of relentless malware attacks.

“They took a punch and kept on going,” he said.