Tracking & Law Enforcement

Australian Police Infiltrate Encrypted Messaging App Ghost and Arrest Dozens

Australian police have infiltrated encrypted messaging app Ghost, which has been used for illegal activities, and arrested dozens of people.

Australian police have infiltrated encrypted messaging app Ghost, which has been used for illegal activities, and arrested dozens of people.

Australian police said Wednesday they have infiltrated Ghost, an encrypted global communications app developed for criminals, leading to dozens of arrests.

The app’s alleged administrator, Jay Je Yoon Jung, 32, appeared in a Sydney court Wednesday on charges including supporting a criminal organization and benefitting from proceeds of crime.

Jung did not enter pleas or apply to be released on bail. He will remain behind bars until his case returns to court in November.

Australian police arrested 38 suspects in raids across four states in recent days while law enforcement agencies were also making arrests in Canada, Sweden, Ireland and Italy, Australian Federal Police Deputy Commissioner Ian McCartney said.

“We allege hundreds of criminals including Italian organized crime, motorcycle gang members, Middle Eastern organized crime and Korean organized crime have used Ghost in Australia and overseas to import illicit drugs and order killings,” McCartney told reporters.

Australian police had prevented 50 people from being killed, kidnapped or seriously hurt by monitoring threats among 125,000 messages and 120 video calls since March, Assistant Commissioner Kirsty Schofield said.

Advertisement. Scroll to continue reading.

Police allege the Jung developed the app specifically for criminal use in 2017.

Australia joined a Europol-led global taskforce targeting Ghost in 2022.

Col. Florian Manet, who heads France’s Home Affairs Ministry National Cyber Command Technical Department, said in a statement issued by Australian police that his officers provided technical resources to the task force over several years that helped decrypt the communications.

McCartney said the French had “provided a foot in the door” for Australian police to decrypt Ghost communications.

Australian police technicians were able to modify software updates regularly pushed out by the administrator, McCartney said.

“In effect, we infected the devices, enabling us to access the content on Australian devices,” McCartney said, adding that the alleged administrator lived in his parents’ Sydney home and had no police record.

Jung was arrested at his home on Tuesday.

Police say Jung used a network of resellers to offer specialized handsets to criminals around the world.

The modified smartphones sold for 2,350 Australian dollars ($1,590) which included a six-month subscription to Ghost and tech support.

Related: Hundreds Arrested in ‘Staggering’ FBI Encrypted Phone Sting

Related: UK Teen Arrested Over Transport for London Hack

Related: Suspected Scattered Spider Member Arrested in UK

Related Content

Cybercrime

Hundreds of C&C servers were disrupted in an operation involving law enforcement and several cybersecurity companies.

Malware & Threats

Law enforcement and private partners took down 106 SocGholish C&C servers and domains as part of Operation Endgame.

Government

The 13 websites purported to be affiliated with consulting companies that advertised job openings for current and former holders of security clearances

Cybercrime

Law enforcement and tech companies disrupted infrastructure linked to scammers operating across Southeast Asia.

Cybercrime

The two own Dutch companies that allegedly provided bulletproof hosting services to Russia-aligned threat actors.

Vulnerabilities

Sites belonging to major universities such as Harvard and Oxford, as well as DuckDuckGo, have been compromised in the attack.

Cybercrime

The FBI says First VPN has been used by dozens of ransomware groups for network reconnaissance and intrusions.

Malware & Threats

 Fox Tempest provides a service that cybercriminals use to distribute ransomware and other malware disguised as legitimate software.

Copyright © 2026 SecurityWeek ®, a Wired Business Media Publication. All Rights Reserved.

Exit mobile version