A Nigerian man has admitted being part of a computer hacking and identity theft scheme that targeted a number of United States government agencies, New Jersey authorities announced this week.
According to the FBI, 30-year-old Abiodun Adejohn and his conspirators sent fraudulent emails to the employees of several government organizations in an effort to lure them to phishing sites designed to mimic the legitimate webmail login pages of government agencies.
Court documents show that the fraudsters targeted organizations like the US Environmental Protection Agency and the US Department of Commerce-Census Bureau between at least 2012 and December 2013. They used the phished email credentials to access the accounts from which they placed orders for office products, usually printer toner cartridges, at vendors authorized to do business with the government.
The vendors were told to ship the orders to various people in New Jersey and other locations who were tasked with repackaging the items and sending them overseas to the fraudsters. The items were later sold on the black market for a profit, the FBI said.
The individuals responsible for repackaging the office products were paid by Adejohn and his conspirators via money transfers using services like Western Union. According to court documents, these “repackagers” were “unwitting individuals,” which suggests that they might have been tricked into participating in the scheme by being offered legitimate-looking jobs.
In December 2013, Trend Micro researchers detailed such an operation run by fraudsters in Russia. At the time, experts highlighted the fact that many of these “workers” never actually get paid, and they quickly get replaced if the masterminds of the operation believe they could pose a risk.
Adejohn ─ who used aliases like “James Williams,” “Olawale Adeyemi,” “Abiodun Ade John” and “Abiodun Ade-John” ─ was arrested in September 2013 in Arizona and he has been in custody ever since. He has pleaded guilty to one count of wire fraud conspiracy for which he faces up to 20 years in prison and a $250,000 fine. Sentencing has been scheduled for September 9.
