FIN9 members Ta Van Tai, Nguyen Viet Quoc, Nguyen Trang Xuyen, and Nguyen Van Truong are accused of hacking into the computer networks of various U.S. companies. Over a period from May 2018 to October 2021, they allegedly stole non-public information, including private data on employee benefits and funds. The group reportedly deployed malware, stole sensitive data, and extorted money from their victims.
They redirected digital employee benefits, such as gift cards, to their own accounts and also stole gift card information from certain victims. Additionally, personal information and credit card details from employees and customers of the targeted companies were allegedly stolen. To conceal their identities, the defendants used the stolen information to register online accounts at cryptocurrency exchanges or server hosting companies.
They also sold the stolen gift cards to third parties through a cryptocurrency marketplace. The group targeted a variety of U.S. companies, including those in the technology, manufacturing, and financial sectors. The investigation into the case was led by the FBI Newark’s Cyber Squad, with assistance from the FBI Little Rock Cyber Squad.
The case is being prosecuted by Assistant U.S. Attorneys Anthony P. Torntore and Vinay S. Limbachia. The defendants are facing various charges, including conspiracy to commit fraud, extortion, and related activities involving computers, carrying penalties of up to 5 years in prison.
The defendants also face charges of conspiracy to commit wire fraud, intentional damage to a protected computer, conspiracy to commit money laundering, aggravated identity theft, and conspiracy to commit identity fraud, carrying potential maximum sentences ranging from 2 to 20 years in prison. U.S. Attorney Philip R. He highlighted the use of keyboards, VPNs, and fake identities in the defendants’ operations, and emphasized that the Department of Justice was able to track them down. Special Agent in Charge James E. Dennehy of the FBI’s Newark office underscored the challenges posed by cyber actors and urged affected businesses and organizations to promptly contact law enforcement.
The indictment represents a part of broader U.S. law enforcement initiatives aimed at disrupting sophisticated cybercrime groups such as FIN9. The FBI has highlighted the growing danger posed by these groups and emphasized the need for robust security measures to safeguard digital assets.