Investigation of banking hack leads to arrests in Europe, Brazil
German and Brazilian authorities said there were multiple arrests this week related to a late 2023 hack that drained an estimated €30 million ($34.7 million) from German bank accounts.
Germany’s federal police agency, the BKA, said three suspects were picked up in Europe and charged with fraud, and Brazil’s federal police said four others were arrested on similar charges there as part of Operação Klonen (Operation Clone), which executed 21 search and seizure warrants nationwide.
Over four days in November 2023, the hackers were able to make “numerous unauthorized withdrawals from the accounts of German online banking users” by exploiting a vulnerability in a payment provider, the BKA said. Brazilian authorities said the process involved cloned payment cards.
The criminals then moved and laundered the money through networks in Brazil and four European countries, police said.
Neither police agency specified the affected bank, but Brazilian media reported that it was Germany’s Commerzbank. German media reported in late 2023 that Commerzbank had suffered a €30 million hack. At the time, the Frankfurt-based bank said customers would not incur losses. The bank did not immediately respond to a request for comment.
The suspects detained in Europe will be prosecuted in Spain and Bulgaria, the BKA said. Spanish and Bulgarian authorities assisted in the investigation, the agency said, as well as the Frankfurt public prosecutor’s office.
Brazilian authorities said courts there ordered the seizure of “financial assets, vehicles, and real estate” worth more than $20 million.
There was a twist, too: A person identified in the investigation “was a candidate for elected office in 2024 and used part of the illicitly obtained money in his campaign,” Brazilian police said. They did not release his name.
Local media reported he had been a city council candidate in Rio de Janeiro.
Brazilian police also said they seized a 3-D printer used to make weapons as part of the sweep for suspects.
References in this story
- PF deflagra operação contra fraudes bancárias eletrônicas e lavagem de dinheiro www.gov.br Ação cumpre ordens judiciais em Goiás, em São Paulo e no Rio de Janeiro
- Betrugsfall: Kriminelle räumen Konten von Commerzbank-Kunden leer www.handelsblatt.com Bei Deutschlands zweitgrößter Privatbank haben Unbekannte offenbar von mehr als 100 Konten einen zweistelligen Millionen-Betrag abgebucht. Sie sollen Girocards mit einer bestimmten Funktion genutzt haben.
- Operação da PF contra esquema de R$ 180 milhões apreende impressora 3D que faz armas www.otempo.com.br Leia mais sobre operação da Polícia Federal que apreendeu impressora 3D usada para fabricar armas e desmantelou esquema de fraudes bancárias de R$ 180 milhões.
- Advanced Cyber Threat Intelligence | Recorded Future www.recordedfuture.com Get real-time, actionable cyber threat intelligence with Recorded Future. Mitigate cyber risks, prioritize threats, and proactively secure your organization.
- Joe Warminsky (@jwarminsky.bsky.social) bsky.app News Editor at The Record: @therecordmedia.bsky.social [ Tired of bios ] [ Often thinking about music ] [ Etc. ]
