The Netherlands Police and Public Prosecution Service welcome the EU sanctions that were imposed today on two Russian companies, the CEO of these companies, and another key player in organised cybercrime. The sanctions were introduced to make it harder for cyber criminals to continue their activities, and to disrupt their criminal business model.
The companies sanctioned today provided infrastructure to cyber criminals as so-called bulletproof hosters, which we reported on earlier this year. They offered their customers an apparent ‘safe haven’ to control botnets, distribute malware, and send phishing mails unhindered. The infrastructure was used to launch large-scale ransomware attacks and phishing campaigns within the EU, causing considerable financial losses to both businesses and institutions.
Comprehensive service package
According to sources in the case file, the sanctioned CEO offered customers a comprehensive service package, including server hosting, technical support, domain registration, and protection against enforcement measures. The package was particularly attractive to ransomware groups, such as LockBit, BlackBasta, and Cl0p. The other sanctioned person was identified in the context of Operation Endgame. The Netherlands Police and Public Prosecution Service consider him a key player in the organised cybercrime scene, stating that his actions have contributed to multiple botnet and ransomware attacks.
Disruption of criminal activities
Some examples of the consequences of the sanctions imposed today are that these companies’ assets in the EU are frozen, the CEO can no longer travel to EU countries, and doing business with these persons and companies is prohibited with immediate effect. This makes it harder for cyber criminals to continue their activities and benefit from their earnings, which shows that it is possible to deal a direct blow to facilitators of criminal activities by targeting their freedom of movement, financial status, and business models.
Information from the Netherlands
The Netherlands Police and Public Prosecution Service made a significant contribution to the EU sanctions imposed. The information they provided was important to justify the sanctions, which are part of a broader strategy to tackle cybercrime by combining criminal investigations, international cooperation, and preventive measures. “Criminals operate across borders, and it is therefore crucial to develop a joint European approach, including structurally exchanging information between the member states and EU institutions. We’re committed to fighting cyber criminals with innovative methods, even when the relevant companies and persons are in countries from which they think they can operate in relatively safety”, comments Hieke Buist, Deputy Chief Public Prosecutor at the Public Prosecution Service’s National Office.
Responsibility
Within the Netherlands Police, the person responsible for cybercrime strategy is Stan Duijf, Head of Operations at National Investigations and Special Operations. He points out that companies have a duty to improve their implementation of verification and compliance regulations. Doing so will help them avoid criminal liability for indirectly contributing to the continuance of cybercrime: “Bulletproof hosters are an essential link in cybercrime. Sanctions are one way of undermining the business model of bulletproof hosters and hacker groups. Moreover, the sanctions send a clear message to all companies across the EU: Don’t do business with sanctioned companies or persons. Because if you do, you’re committing a criminal offence and harming your own organisation and society as a whole.”
Checking sanctions lists
The police call on businesses and entrepreneurs to actively check sanctions lists and refrain from offering services to sanctioned parties or receiving services from such parties, not even in indirect ways.
Only last May, two people were arrested, in the context of an investigation by the Fiscal Intelligence and Investigation Service, on suspicion of violating the Dutch Sanctions Act. Cybercrime has a major impact on victims and society. Each year, individuals, businesses, and government authorities are confronted with ransomware attacks, data breaches, and other types of cybercrime. The Netherlands Police and Public Prosecution Service continue to invest in criminal investigations, international cooperation, and the disruption of criminal networks involved in this type of crime.