A Ukrainian citizen, member of the known threat actor group FIN7/Carbanak on credit card and financial theft, was sentenced to 5 years in prison.
Denys Iarmak , who was arrested in Bangkok in November 2019, was extradited to the United States for trial.
The 32-year-old defendant is accused of working as a pentester for the FIN7 group, which is known for obtaining more than 20 million credit card information using 6500 POS machines at thousands of US businesses since 2015.
It is known that when the group’s operations in non-US countries such as France, the United Kingdom and Australia are taken into account, they cause a loss of approximately 1 billion dollars.
Attack methods, on the other hand, are not much more than simple phishing scenarios. Malicious e-mails were sent to the employees of the organizations to be infiltrated, and credibility was ensured with social engineering techniques.
According to the US Justice Department , the information obtained as a result of the attacks was offered for sale on various “carg” platforms. Iarmak played a key role in designing phishing emails, hacking systems and leaking payment information, said Nicholas Brown, a Washington Western District attorney.
Iarmak’s continuing to work with FIN7 despite his other arrested accomplices, is also seen as an aggravating factor by the court. According to the decision taken, he will serve 5 years, their mutual friend from FIN7, Fedir Hlyadr, 10 years, and Andrii Kolpakov 7 years in prison.