Yazılar

DOGE Staffer ‘Big Balls’ Linked to Cybercrime Group, Records Show

Edward Coristine, known by his nickname “Big Balls,” a key member of Elon Musk’s DOGE Service team, provided technical support to a cybercrime group involved in illegal activities, including cyberstalking and data trafficking, according to digital records reviewed by Reuters.

Coristine’s Role in DiamondCDN and EGodly

Coristine, a 19-year-old technologist, founded a company named DiamondCDN around 2022, which offered network services. The company was linked to EGodly, a cybercrime ring that boasted about engaging in criminal activities such as stealing data and cyberstalking law enforcement officials. Digital records show that between October 2022 and June 2023, DiamondCDN’s infrastructure was used to support EGodly’s website, dataleak.fun, which was involved in cybercrimes. EGodly publicly thanked DiamondCDN for providing them with DDoS protection and caching systems.

Connection to Government Agencies

Despite these associations, Coristine has been recognized for his work with U.S. government agencies. He is listed as a “senior adviser” at the State Department and the Cybersecurity and Infrastructure Security Agency (CISA). His name also appears in their staff directories, raising concerns about his involvement in securing government networks despite his previous ties to cybercriminals. Coristine describes himself as a “Volunteer (Intern) Plumber” with the U.S. government on his LinkedIn profile.

EGodly’s Cybercrimes and FBI Targeting

EGodly, the group with which Coristine’s company had ties, was known for a variety of cybercrimes, including hijacking phone numbers, breaking into law enforcement email accounts, and stealing cryptocurrency. The group also posted personal information about an FBI agent they targeted for harassment. The group’s members were reportedly involved in the dangerous practice of swatting, which involves making hoax emergency calls to send armed officers to targeted locations. Law enforcement has been aware of EGodly’s activities due to its connection to cybercrime and swatting incidents.

Concerns Over National Security

Nitin Natarajan, former deputy director of CISA, expressed concern over the potential risks posed by Coristine’s past associations with EGodly, noting that it is troubling for someone with such connections to hold a position in government security. This raises questions about the vetting process and the broader implications of such individuals gaining access to sensitive government networks.

Cryptocurrency Firm Founder Pleads Guilty to Market Manipulation in U.S. Court

Aleksei Andriunin, the founder and CEO of cryptocurrency financial services firm Gotbit, pleaded guilty on Friday to U.S. federal charges related to a market manipulation scheme. Andriunin, a Russian national, and his company entered guilty pleas in federal court in Boston to charges of conspiring to commit market manipulation and wire fraud.

The guilty pleas came after Andriunin, 26, was extradited from Portugal in October, where he had been residing prior to his arrest. This followed a broad investigation into the cryptocurrency sector, known as “Operation Token Mirrors,” which involved the FBI’s creation of its own digital token to help catch fraudsters operating in the crypto market.

As part of his plea agreement, prosecutors have recommended that Andriunin be sentenced to up to two years in prison when he faces sentencing on June 16. Additionally, Gotbit has agreed to forfeit approximately $23 million worth of cryptocurrency.

From 2018 to 2024, Gotbit engaged in “wash trading,” a form of fraudulent trading in which assets are bought and sold with no intention of real market activity, to artificially inflate trading volumes for cryptocurrency clients. The goal was to make tokens appear more valuable to facilitate their listing and trading on larger exchanges. Andriunin was known to have developed a code specifically designed for wash trading, as he described in a 2019 interview.

The manipulation involved millions of dollars in wash trades, and Gotbit earned tens of millions of dollars in proceeds for its services. Some of the cryptocurrencies involved in the scheme included Saitama and Robo Inu, and individuals associated with these cryptocurrencies have also been charged.

International Law Enforcement Operation Targets Cybercrime Websites

On Wednesday, the FBI, along with multiple law enforcement agencies, seized a series of cybercrime-related websites as part of an operation called “Operation Talent.” The seizure, confirmed by notices posted on the affected websites, included the websites themselves, along with customer and victim data.

Europol confirmed the operation was coordinated under its guidance, and a spokesperson indicated more details would be provided in the next 24 hours. The FBI has yet to comment on the operation.

The operation specifically targeted websites associated with popular cybercrime platforms, including Cracked, Nulled, StarkRDP, Sellix, and MySellix. These sites were known for their involvement in illegal activities, facilitating access to stolen login credentials, pirated software, video game cheats, and stolen credit card information, according to reports from Bleeping Computer and VX-Underground.

A message posted on a Cracked Telegram channel later confirmed the seizure, though it did not provide specific reasons for the action. The post expressed disappointment and noted that administrators were awaiting more information from the website’s domain host and data center. “A sad day indeed for our community,” the message stated.