Cybercrime

US Police Detective Charged With Purchasing Stolen Credentials

Terrance Michael Ciszek is charged with buying stolen account credentials from the Genesis Market dark web marketplace.

Terrance Michael Ciszek is charged with buying stolen account credentials from the Genesis Market dark web marketplace.

The US Department of Justice has announced charges against a Buffalo police detective who allegedly bought stolen credentials and on an underground darkweb marketplace.

According to the indictment, 34-year-old Terrance Michael Ciszek (also known as DrMonster) purchased 11 packages on Genesis Market between March 16 and July 29, 2020, including 194 stolen account credentials.

Launched in 2018 as an invite-only marketplace, Genesis Market provided users with access to so-called bots, which were stolen browser fingerprints enabling miscreants to access services and systems while making the requests seem like coming from legitimate users.

These pre-made packages enabled cybercriminals to execute attacks quickly and steal funds or perform other types of fraud before their victims could spot the compromise.

In April 2023, law enforcement agencies in the US, Australia, and Europe announced the takedown of Genesis and the arrest of 120 individuals allegedly associated with the marketplace’s operations.

Ciszek, the indictment alleges, was interrogated on April 4, 2023, regarding his use of Genesis, and lied to the FBI, claiming he made no purchase on the marketplace and stating that his nephew might have been responsible for those purchases.

Advertisement. Scroll to continue reading.

The indictment also alleges that Ciszek had cryptocurrency wallet addresses associated with the dark web carding website UniCC, and that he had recorded a video explaining his use of UniCC and how he was hiding his identity when purchasing stolen credit cards.

In the video he also praised UniCC, claiming that he was usually getting his credit cards from the website.

Ciszek was charged “with possession of unauthorized access devices with intent to defraud and making a false statement to an agency of the United States, which carry a maximum penalty of 10 years in prison,” the DoJ announced.

Related: Anonymous Sudan DDoS Service Disrupted, Members Charged by US

Related: Russia Arrests 96 People Tied to US-Disrupted Cryptocurrency Exchanges

Related: UK Court Says Assange Can’t be Extradited on Espionage Charges Until US Rules Out Death Penalty

Related: Trump Confirms U.S. Launched Cyberattack on Russian Troll Farm in 2018

Related Content

Cybercrime

The stolen credit card data was released as a free download, allegedly in response to seller misconduct.

Cloud Security

According to reports, the US Department of Justice will assess whether the deal would harm competition in the cybersecurity market.

Tracking & Law Enforcement

The Archetyp Market drug marketplace has been targeted by law enforcement in an operation involving takedowns and arrests. 

Data Breaches

Sina Gholinejad pleaded guilty to computer-fraud and wire-fraud-conspiracy charges linked to the Robbinhood ransomware hit on Baltimore.

Malware & Threats

Redmond’s threat hunters found 394,000 Windows systems talking to Lumma controllers, a victim pool that included global manufacturers. 

Cyberwarfare

i-Soon employees charged with conducting extensive hacking campaigns on behalf of Beijing’s security services.

Government

Law enforcement turns the PlugX malware’s own self-delete mechanism against it, nuking the China-linked trojan from thousands of US machines.

Data Breaches

Cybercriminals who hacked Rhode Island’s system for health and benefits programs have released files to a site on the dark web,

Copyright © 2026 SecurityWeek ®, a Wired Business Media Publication. All Rights Reserved.

Exit mobile version