DOJ Shut Down Slilpp Marketplace for Stolen Credentials

The U.S. Justice Department has shut down the Slilpp cybercrime marketplace, which sold stolen credentials related to bank accounts and other payment mechanisms, in a multinational operation.

Impact of Action

The latest disruption may not have any impact on more sophisticated threat actors, as they are less likely to use services such as Slilpp, which is mostly populated by beginner gangs and hackers, Ilia Kolochenko, founder of security firm ImmuniWeb and a member of the Europol Data Protection Experts Network, notes.

"Professional cyber mercenaries are rarely seen on such forums or marketplaces. Nation-state hackers and sophisticated APT groups enjoy multi-layered protection: They can afford physical security, the best lawyers and offshore bankers to launder their illicit income. They don’t need to advertise their services. They have a well-established base of wealthy customers spanning from organized crime to governments,” she says.

Since such actors host their communication servers on AWS or Azure, both of which use strong encryption, they are less likely to leave any trace that could help to identify them, Kolochenko adds. Read Full Article