Connect with us

Hi, what are you looking for?

SecurityWeekSecurityWeek

Cybercrime

Third Member of FIN7 Cybercrime Gang Sentenced to US Prison

A Ukrainian national was sentenced on Thursday to five years in prison in the United States for his role in the infamous FIN7 hacking group.

The man, Denys Iarmak, 32, was a high-level hacker within FIN7, also referred to as a “pen tester,” working with the cyber gang between November 2016 and November 2018, documents presented in court show.

A Ukrainian national was sentenced on Thursday to five years in prison in the United States for his role in the infamous FIN7 hacking group.

The man, Denys Iarmak, 32, was a high-level hacker within FIN7, also referred to as a “pen tester,” working with the cyber gang between November 2016 and November 2018, documents presented in court show.

Iarmak was arrested in Bangkok, Thailand, in November 2019. He was transferred to US custody in May 2020 and pleaded guilty in November 2021 to conspiracy to commit wire fraud and computer hacking.

The FIN7 group, which continues to evolve despite arrests, is said to have stolen more than 20 million card records from organizations in the US, causing estimated losses of more than $1 billion dollars.

Also referred to as Carbanak and Anunak, FIN7 is suspected of launching malware campaigns against hundreds of organizations in the US and abroad, including those in the gambling, hospitality, and restaurant sectors.

[ READ: Member of FIN7 Cybercrime Gang Sentenced to Prison in U.S. ]

Active since at least 2015, the group stole millions of credit and debit card numbers and then used or sold them for profit.

According to court documents, Iarmak worked with FIN7 for roughly two years, using project management platforms such as JIRA to coordinate malicious activity and intrusions.

Advertisement. Scroll to continue reading.

JIRA was used by the group’s members to track the progress of their intrusions, to upload stolen data, and offer guidance to each other.

The compensation that Iarmak received for his participation in FIN7 “far exceeded comparable legitimate employment in Ukraine,” the US Department of Justice notes.

Iarmak is the third Ukrainian member of the FIN7 group to be sentenced to prison in the US. Last year, Andrii Kolpakov and Fedir Hladyr were sentenced to seven and ten years in prison, respectively.

Related: Member of FIN7 Hacking Group Sentenced to US Prison

Related: FIN7 Cybercrime Operation Continues to Evolve Despite Arrests

Related: FIN7 Hackers Use New Malware in Recent Attacks

Written By

Ionut Arghire is an international correspondent for SecurityWeek.

Click to comment

Trending

Daily Briefing Newsletter

Subscribe to the SecurityWeek Email Briefing to stay informed on the latest threats, trends, and technology, along with insightful columns from industry experts.

Join the session as we discuss the challenges and best practices for cybersecurity leaders managing cloud identities.

Register

SecurityWeek’s Ransomware Resilience and Recovery Summit helps businesses to plan, prepare, and recover from a ransomware incident.

Register

People on the Move

Cody Barrow has been appointed as CEO of threat intelligence company EclecticIQ.

Shay Mowlem has been named CMO of runtime and application security company Contrast Security.

Attack detection firm Vectra AI has appointed Jeff Reed to the newly created role of Chief Product Officer.

More People On The Move

Expert Insights

Related Content

Cybercrime

A recently disclosed vBulletin vulnerability, which had a zero-day status for roughly two days last week, was exploited in a hacker attack targeting the...

Cybercrime

The changing nature of what we still generally call ransomware will continue through 2023, driven by three primary conditions.

Cybercrime

As it evolves, web3 will contain and increase all the security issues of web2 – and perhaps add a few more.

Cybercrime

Luxury retailer Neiman Marcus Group informed some customers last week that their online accounts had been breached by hackers.

Cybercrime

Zendesk is informing customers about a data breach that started with an SMS phishing campaign targeting the company’s employees.

Cybercrime

Patch Tuesday: Microsoft calls attention to a series of zero-day remote code execution attacks hitting its Office productivity suite.

Artificial Intelligence

The release of OpenAI’s ChatGPT in late 2022 has demonstrated the potential of AI for both good and bad.

Cybercrime

Satellite TV giant Dish Network confirmed that a recent outage was the result of a cyberattack and admitted that data was stolen.