Romanian police, FBI break up 70-strong eBay fraud ring

Romanian authorities, in conjunction with U.S. law enforcement, have arrested 70 individuals from three different organized cybercrime groups on charges they perpetrated online auction scams that targeted eBay users.

The arrests were the result of a string of raids organized by the Romanian Directorate for Investigating Organized Crime and Terrorism (DIICOT), the agency said in a news release issued on Sunday.

Citing published reports out of Romania, the fraudsters may have carried out their scams by first launching phishing attacks to obtain login credentials from legitimate eBay users, Gary Warner, director of research in computer forensics at the University of Alabama at Birmingham, said in a Tuesday blog post. The defendants then used the hijacked accounts to set up fake auctions selling big-ticket items, such as electronics, cars, airplanes, motorcycles and jewelry.

Since 2006, these cybercrime groups have scammed individuals in Spain, Italy, France, New Zealand, Denmark, Sweden, Germany, Austria, the United States, Canada and Switzerland, DIICOT said. International authorities have identified more than 800 victims, from which fraudsters stole the Euro equivalent of more than $1 million.

The raids, which took place Sunday, were conducted in partnership with the FBI and U.S. Secret Service from the U.S. Embassy in Bucharest, DIICOT said. Hundreds of law enforcement officers carried out the raids, which included 101 search warrants being served.

DIICOT said the operation was its most significant organized crime bust this year. But authorities there have dismantled other sophisticated fraud and ID theft rings during the past two years.

More in News

Google hackers wanted to know which Chinese intel operatives were being watched

Attackers who raided Google in 2010 to learn information about Chinese human rights activists were also trying to gain insight on which Chinese intelligence agents were on the radar of U.S. authorities, according to a report.

California law would require breach notice if online account information is stolen

The new legislation would amend the definition of "personal information" under the state's breach notification law.

Liable to attack: Cyber insurance can help organizations cover the cost of breaches

Liable to attack: Cyber insurance can help organizations ...

Everyone is familiar with health, flood, car and life insurance, but what happens when the digital equivalent of a disaster strikes? Some entities may want this peace of mind, but ...