Nigerian faces up to 102 years in the slammer for $1.5M phishing scam
(2024/06/14)
- Reference: 1718396115
- News link: https://www.theregister.co.uk/2024/06/14/phishing_scam_conviction/
- Source link:
The US Department of Justice has convicted a Nigerian national of participating in a business email compromise (BEC) scam worth $1.5 million.
The Feds say Ebuka Raphael Umeti, 35, perpetuated the scam with two alleged partners in crime, using a combination of social engineering and malicious software to pull off the million-dollar BEC scheme. A BEC fraud involves phishing emails and deception to get businesses and organizations to send money or valuable data to attackers, usually over email.
According to the DoJ, Umeti got involved in BEC scams as early as February 2016, when one of his alleged co-conspirators, fellow Nigerian national Franklin Ifeanyichukwu Okwonna, is said to have sent Umeti a phishing email template. The collaborators started to see success in 2018, siphoning $571,000 from a New York wholesaler and $400,000 from a Texan metal supplier.
[1]
In the following years, the scammers started domain spoofing, signed up for VoIP numbers, and communicated over the gaming-focused chat platform Discord.
[2]
[3]
It's not unusual to find cybercrims congregating on services like this, such as the [4]one command-and-control malware service hosting tech support on Discord and Telegram.
They also began sending emails injected with malware that would allow them to gain remote access to compromised computers, further assisting their fraud. This new technique may be what led to the duo into picking up another member, alleged to be Saudi Arabia national Mohammed Naji Mohammedali Butaish – who has yet to be tried on the charges. Butaish is alleged to have first got involved in 2020 when he is suspected of coding new malware for Umeti and Okwonna.
[5]Ukraine busts SIM farms targeting soldiers with spyware
[6]Two cuffed over suspected smishing campaign using 'text message blaster'
[7]FlyingYeti phishing crew grounded after abominable Ukraine attacks
[8]Russia's Cozy Bear caught phishing German politicos with phony dinner invites
According to the DoJ's indictment, in 2021 the three began focusing on malware allegedly designed by Butaish, who the Feds claim sold it to his alleged co-conspirators and others.
Although the three were indicted in August 2022, Umeti and Okwonna weren't actually arrested until January this year. Part of the delay was because the two lived in Nigeria, but since the West African country has an extradition treaty with the US, this didn't shield them from prosecution.
[9]
According to court documents, Butaish has not yet been arrested, and since Saudi Arabia does not have an extradition treaty with the US, it's unclear if he ever will go to his own trial.
Meanwhile, Umeti's trial ended yesterday with the jury finding him guilty of all counts; Okwonna had already been found guilty on May 20. They are respectively scheduled to be sentenced on August 27 and September 3, and Umeti could face up to 102 years in prison. However, federal sentencing guidelines can be complex, and it's unlikely Umeti will see a triple-digit sentence.
Just a few weeks ago the DoJ sentenced a Georgia resident [10]to a decade in prison for a BEC scheme worth $4.5 million. The feds are also seeking [11]$5 million of cash stolen from trade unions in an ongoing case. ®
Get our [12]Tech Resources
[1] https://pubads.g.doubleclick.net/gampad/jump?co=1&iu=/6978/reg_security/cybercrime&sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&tile=2&c=2Zmy9gzbXGr3de7rHvMEQigAAAQU&t=ct%3Dns%26unitnum%3D2%26raptor%3Dcondor%26pos%3Dtop%26test%3D0
[2] https://pubads.g.doubleclick.net/gampad/jump?co=1&iu=/6978/reg_security/cybercrime&sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&tile=4&c=44Zmy9gzbXGr3de7rHvMEQigAAAQU&t=ct%3Dns%26unitnum%3D4%26raptor%3Dfalcon%26pos%3Dmid%26test%3D0
[3] https://pubads.g.doubleclick.net/gampad/jump?co=1&iu=/6978/reg_security/cybercrime&sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&tile=3&c=33Zmy9gzbXGr3de7rHvMEQigAAAQU&t=ct%3Dns%26unitnum%3D3%26raptor%3Deagle%26pos%3Dmid%26test%3D0
[4] https://www.theregister.com/2022/08/08/dark_utilities_c2_service/
[5] https://www.theregister.com/2024/06/14/ukraine_sim_farm_bust/
[6] https://www.theregister.com/2024/06/10/two_arrested_uk_smishing/
[7] https://www.theregister.com/2024/05/31/crowdforce_flyingyeti_ukraine/
[8] https://www.theregister.com/2024/03/23/russia_cozy_bear_german_politicians_phishing/
[9] https://pubads.g.doubleclick.net/gampad/jump?co=1&iu=/6978/reg_security/cybercrime&sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&tile=4&c=44Zmy9gzbXGr3de7rHvMEQigAAAQU&t=ct%3Dns%26unitnum%3D4%26raptor%3Dfalcon%26pos%3Dmid%26test%3D0
[10] https://www.theregister.com/2024/05/22/health_care_and_romance_frauds/
[11] https://www.theregister.com/2024/06/06/union_bec_scam/
[12] https://whitepapers.theregister.com/
The Feds say Ebuka Raphael Umeti, 35, perpetuated the scam with two alleged partners in crime, using a combination of social engineering and malicious software to pull off the million-dollar BEC scheme. A BEC fraud involves phishing emails and deception to get businesses and organizations to send money or valuable data to attackers, usually over email.
According to the DoJ, Umeti got involved in BEC scams as early as February 2016, when one of his alleged co-conspirators, fellow Nigerian national Franklin Ifeanyichukwu Okwonna, is said to have sent Umeti a phishing email template. The collaborators started to see success in 2018, siphoning $571,000 from a New York wholesaler and $400,000 from a Texan metal supplier.
[1]
In the following years, the scammers started domain spoofing, signed up for VoIP numbers, and communicated over the gaming-focused chat platform Discord.
[2]
[3]
It's not unusual to find cybercrims congregating on services like this, such as the [4]one command-and-control malware service hosting tech support on Discord and Telegram.
They also began sending emails injected with malware that would allow them to gain remote access to compromised computers, further assisting their fraud. This new technique may be what led to the duo into picking up another member, alleged to be Saudi Arabia national Mohammed Naji Mohammedali Butaish – who has yet to be tried on the charges. Butaish is alleged to have first got involved in 2020 when he is suspected of coding new malware for Umeti and Okwonna.
[5]Ukraine busts SIM farms targeting soldiers with spyware
[6]Two cuffed over suspected smishing campaign using 'text message blaster'
[7]FlyingYeti phishing crew grounded after abominable Ukraine attacks
[8]Russia's Cozy Bear caught phishing German politicos with phony dinner invites
According to the DoJ's indictment, in 2021 the three began focusing on malware allegedly designed by Butaish, who the Feds claim sold it to his alleged co-conspirators and others.
Although the three were indicted in August 2022, Umeti and Okwonna weren't actually arrested until January this year. Part of the delay was because the two lived in Nigeria, but since the West African country has an extradition treaty with the US, this didn't shield them from prosecution.
[9]
According to court documents, Butaish has not yet been arrested, and since Saudi Arabia does not have an extradition treaty with the US, it's unclear if he ever will go to his own trial.
Meanwhile, Umeti's trial ended yesterday with the jury finding him guilty of all counts; Okwonna had already been found guilty on May 20. They are respectively scheduled to be sentenced on August 27 and September 3, and Umeti could face up to 102 years in prison. However, federal sentencing guidelines can be complex, and it's unlikely Umeti will see a triple-digit sentence.
Just a few weeks ago the DoJ sentenced a Georgia resident [10]to a decade in prison for a BEC scheme worth $4.5 million. The feds are also seeking [11]$5 million of cash stolen from trade unions in an ongoing case. ®
Get our [12]Tech Resources
[1] https://pubads.g.doubleclick.net/gampad/jump?co=1&iu=/6978/reg_security/cybercrime&sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&tile=2&c=2Zmy9gzbXGr3de7rHvMEQigAAAQU&t=ct%3Dns%26unitnum%3D2%26raptor%3Dcondor%26pos%3Dtop%26test%3D0
[2] https://pubads.g.doubleclick.net/gampad/jump?co=1&iu=/6978/reg_security/cybercrime&sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&tile=4&c=44Zmy9gzbXGr3de7rHvMEQigAAAQU&t=ct%3Dns%26unitnum%3D4%26raptor%3Dfalcon%26pos%3Dmid%26test%3D0
[3] https://pubads.g.doubleclick.net/gampad/jump?co=1&iu=/6978/reg_security/cybercrime&sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&tile=3&c=33Zmy9gzbXGr3de7rHvMEQigAAAQU&t=ct%3Dns%26unitnum%3D3%26raptor%3Deagle%26pos%3Dmid%26test%3D0
[4] https://www.theregister.com/2022/08/08/dark_utilities_c2_service/
[5] https://www.theregister.com/2024/06/14/ukraine_sim_farm_bust/
[6] https://www.theregister.com/2024/06/10/two_arrested_uk_smishing/
[7] https://www.theregister.com/2024/05/31/crowdforce_flyingyeti_ukraine/
[8] https://www.theregister.com/2024/03/23/russia_cozy_bear_german_politicians_phishing/
[9] https://pubads.g.doubleclick.net/gampad/jump?co=1&iu=/6978/reg_security/cybercrime&sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&tile=4&c=44Zmy9gzbXGr3de7rHvMEQigAAAQU&t=ct%3Dns%26unitnum%3D4%26raptor%3Dfalcon%26pos%3Dmid%26test%3D0
[10] https://www.theregister.com/2024/05/22/health_care_and_romance_frauds/
[11] https://www.theregister.com/2024/06/06/union_bec_scam/
[12] https://whitepapers.theregister.com/
goblinski
Beat me to it - this is not how you treat a prince !!!
Its not his fault, it's Article I, Section 9, Clause 8 ! How could he give them any present, Emolument, Office, or Title, of any kind whatever, without the consent of Congress ?!?
One way traffic
Bendacious
The article made me wonder about US extradition treaties. The Nigerians seem happy enough to have their citizens shipped to the US. I can imagine the US extraditing a Nigerian citizen back to Nigeria to stand trial. I can't imagine the US extraditing a US citizen to Nigeria to stand trial. I wonder what the wording of the treaty is. Fortunately, if a thought enters my head a journalist has written about it somewhere: https://thestreetjournal.org/nigerias-extradition-treaty-list-of-nigerians-who-have-been-extradited-to-the-u-s-to-face-criminal-charges/
"since the treaty became effective in 1935, there is no public record showing the extradition of United States citizens to Nigeria to face criminal charges."
That is not how you should treat a prince who is looking to offload some of his free money!