Nigerian gang steals TL 100 million via cyber-attacks

The “Man In The Middle” fraud method was used by a cyber gang import and export company comprised mainly of Nigerians in Istanbul that was carrying out millions of dollars’ worth of profiteering as a cyber gang has been busted.

Cybercrime Branch Offices teams acted on complaints that a large number of import and export companies were experiencing cyber-attacks. While investigating the complaints, all log records of the companies' information systems were reviewed.

It was found that the money was redirected to another account when the cyber-attack was conducted on the company's mail servers or control panel (cpanel) section defined by the web sites, and money was transferred between the companies.

The "Man In The Middle" which targeted international import and export companies that transferred money amongst each other is the first known example of a fraud method.

Companies that want to sell or buy products from a foreign country generally communicate via email. The cyber gang took advantage of this and conducted a cyber-attack on the mail servers of those companies.

All correspondence between the two companies is secretly followed by cyber gang members. At the last stage, fraudsters send emails to the buyer company and prevent them from reaching the receiving company, creating an invoice with the address where their bank information is given.

The company pays the money to the members of the cyber gang, believing it to be the company's bank account. It was found that many companies that have been duped in Turkey have begun using faxes for security purposes.

According to Habertürk’s news story, the cyber police started to work to identify and capture the gang members who transferred money into their accounts under the companies. Investigating the money transfers, police found a gang comprised mainly of Nigerians.

Using the “Man In The Middle” method, the cyber gang directed at least TL 100 million to their accounts. Police teams conducted simultaneous operations in Esenyurt, Büyükçekmece, Şişli, Balıkesir and Gönen. Thirteen Turkish and Nigerian Nationals were arrested.

Police seized $117,200, 2,860 sterling and 18,195 euro during raids.

In searches made at the addresses of gang members, 117 thousand 200 dollars, 2 thousand 860 pounds and 18 thousand 195 euros were seized. 140 thousand dollars in the accounts of the suspects were seized by a court decision. Additionally, $140,000 found in the suspects’ accounts were suspended.

Analysis of the cyber gang members’ cell phones and social media accounts showed that the suspects had taken photos with the money they took from the import and export countries. The gang members led a luxurious life with the illegal money.