Connect with us

Hi, what are you looking for?

SecurityWeekSecurityWeek

Fraud & Identity Theft

SIM Farm Dismantled in Europe, Seven Arrested

The individuals ran a highly sophisticated cybercrime-as-a-service (CaaS) platform that caused roughly €5 million (~$5.8 million) in losses.

SIM farm dismantled

Seven individuals were arrested in a coordinated law enforcement operation targeting a SIM farm and the sophisticated cybercrime-as-a-service (CaaS) platform it supported.

The suspects provided a SIM box service enabling miscreants worldwide to use phone numbers registered to other people to perform various types of cybercrime.

Essentially, the CaaS’s customers used the phone numbers to create fake social media accounts and hide their identities while engaging in illegal activities such as phishing, smishing, extortion, investment fraud, daughter-son scams, and fraudulent calls connected to fake shops and fake bank pages.

As part of the law enforcement operation, codenamed SIMCartel, five Latvian nationals were arrested in the country. Two other suspects were detained, and 1,200 SIM box devices and 40,000 active SIM cards were seized.

Investigators in Austria, Estonia, and Latvia performed a total of 26 searches and seized hundreds of thousands of additional SIM cards, along with five servers supporting infrastructure for the illegal services. The SIM cards rented as part of the operation had been bought from almost 80 countries.

Operation SIMCartel also targeted two websites the group used to promote its illegal services, namely gogetsms.com and apisim.com.

Advertisement. Scroll to continue reading.

Additionally, the investigators seized four luxury vehicles and froze approximately $800,000 in the suspects’ bank and cryptocurrency accounts.

According to Europol, the CaaS enabled over 3,200 cyber fraud cases in Austria and Latvia, causing financial losses of roughly €5 million (approximately $5.8 million).

“The true scale of this network is still being uncovered. Measured by volume, more than 49 million online accounts were created on the basis of the illegal service provided by suspects. The damage caused by the renters of the telephone numbers to their victims amounts to several million euros,” Europol says.

Related: US Charges Cambodian Executive in Massive Crypto Scam and Seizes More Than $14 Billion in Bitcoin

Related: Spanish Authorities Dismantle ‘GXC Team’ Crime-as-a-Service Operation

Related: VerifTools Fake ID Operation Dismantled by Law Enforcement

Related: German Authorities Take Down Crypto Swapping Service eXch

Written By

Ionut Arghire is an international correspondent for SecurityWeek.

Daily Briefing Newsletter

Subscribe to the SecurityWeek Email Briefing for the latest cybersecurity threats, trends, and expert insights.

Trending

Daily Briefing Newsletter

Subscribe to the SecurityWeek Email Briefing to stay informed on the latest threats, trends, and technology, along with insightful columns from industry experts.

Organizations are investing heavily in third-party risk management, but breaches, delays, and blind spots continue to persist. Join this live webinar as we examine the gap between how organizations think their third-party risk programs are performing and what’s actually happening in practice.

Register

Explore how attackers are using AI to scale threats and how security teams can respond with AI-driven defenses. Protecting against unmonitored use of generative AI (Shadow AI) in business units and building and enforcing AI governance frameworks.

Register

People on the Move

Cyera has appointed Naveen Palavalli as Chief Marketing Officer.

Connie Devine has been promoted to Chief Information Security Officer at Phillips 66.

Jeff Lunglhofer becomes Chief Security Officer at Coinbase, replacing Philip Martin.

More People On The Move

Expert Insights

Daily Briefing Newsletter

Subscribe to the SecurityWeek Email Briefing to stay informed on the latest cybersecurity news, threats, and expert insights. Unsubscribe at any time.