Group-IB, a leading creator of cybersecurity technologies to investigate, prevent, and fight digital crime, announced today that it has contributed a international operation code named “Operation Kaerb” coordinated by Europol and Ameripol–in partnership with European and Latin American law enforcement agencies and judiciary authorities–which resulted in the arrest of 17 cybercriminals in Argentina, Chile, Colombia, Ecuador, Peru, and Spain, who were behind the iServer phishing-as-a-platform targeting mobile users worldwide.

Group-IB participated in the cross-border cybercrime operation, Digital Skimming Action, which was coordinated by Europol and involved the European Union Agency for Cybersecurity (ENISA), law enforcement authorities from 17 countries, and various private sector partners. Group-IB's Threat Intelligence unit provided research on digital skimming patterns and JavaScript sniffer families. As a result of the operation, 23 JavaScript sniffer families were identified, and 443 online merchants were notified that their customers' payment card data had been compromised.

The Carding Action operation in 2021 targeted fraudsters trading compromised payment records in underground marketplaces. Over three months, the Group-IB Threat Intelligence team analyzed newly compromised records from European financial institutions, gathering data from botnets, JavaScript sniffers, and illicit card shops. They identified 12 sellers involved in auctioning these records, preventing an estimated €14 million in losses.

Group-IB provided Europol’s European Cyber Crime Centre (EC3) with intelligence on 90,000 compromised payment records obtained from botnets, JS-sniffers, and underground card shops. The operation prevented an estimated €40 million in losses for European financial institutions.