Moldova Arrests DoppelPaymer Suspect

Summary

Moldovan authorities arrested a suspect linked to the DoppelPaymer ransomware attacks targeting Dutch organizations. The suspect, a 45-year-old foreign national, allegedly orchestrated a 2021 attack against the Dutch Research Council (NWO), resulting in €4.5 million in damages. This arrest highlights the increasing international cooperation in combating cybercrime.

Explore the data solution with built-in protection against ransomware TrueNAS.

** Main Story**

Okay, so you heard about this arrest in Moldova? It’s pretty significant, actually. They nabbed a 45-year-old foreign national they think was involved in those DoppelPaymer ransomware attacks from 2021, you know, the ones that hit the Dutch. It was a joint operation between Moldovan and Dutch police, and now they’re looking at extraditing him to the Netherlands.

The NWO Attack and its Aftermath

I remember that NWO attack. What a mess! Apparently, this guy’s suspected of being behind the ransomware attack against the Dutch Research Council (NWO). Think about the fallout, an estimated €4.5 million in damages. The NWO had to shut down its grant application system completely. Can you imagine the disruption? All those researchers across the Netherlands just left hanging. They refused to pay the ransom—good on them, I say—but then DoppelPaymer did what they do, they published the stolen data on their dark web leak site. “Double extortion,” it’s just nasty.

The Arrest and International Collaboration

Anyway, Moldovan police really went in. They found over €84,800 in cash, an electronic wallet, two laptops, you know the drill… phone, tablet, a bunch of bank cards, and data storage devices. All seized. He’s in custody now, and the extradition process is underway. It’s actually pretty encouraging, this kind of international collaboration. Shows law enforcement agencies are really starting to work together across borders to take down these ransomware operators.

DoppelPaymer: A History of Disruption

DoppelPaymer, they popped up around mid-2019, If I remember correctly, thought to have branched off from that Evil Corp group, known for BitPaymer. Clever bunch, those criminals; they were all about aggressive tactics. Stealing data, threatening to delete decryption keys if victims even thought about negotiating. Total mayhem! They’ve hit tons of big-name organizations worldwide, causing a ton of financial and operational damage.

They have rebranded a couple of times. Or was it more than a couple? Operating under names like “Grief” and “Entropy,” probably trying to stay one step ahead of law enforcement, you know, keep their operations going. Sneaky, but not sneaky enough, it seems.

The Larger Fight Against Ransomware

It’s all part of this wider crackdown on cybercrime across Europe, which is good to see. They’re really cracking down, it’s about time if you ask me.

• Like that two-year prison sentence in Ireland for running a website selling malware and stolen data.
• And the four individuals they arrested in Poland for running those illegal DDoS-for-hire services. Scary stuff.
• Then there was that fake crypto investment scheme out of Ukraine, right? Defrauded Latvian citizens of over $145,000. The money those cybercriminals make is shocking.

These are just some examples of how governments are dealing with the global fight. It all adds up, doesn’t it? I mean, as ransomware attacks get more sophisticated, and continue to be a major headache for everyone, international cooperation is absolutely key to bringing these guys to justice, and disrupting these criminal operations. Without international cooperation, we aren’t going to get very far, are we? It’s a complex problem, no doubt, but this arrest gives you hope that things are moving in the right direction.