{
	"id": "1cdf3e61-b057-499e-996f-396dd952da49",
	"created_at": "2026-04-06T00:13:30.658551Z",
	"updated_at": "2026-04-10T03:36:19.134281Z",
	"deleted_at": null,
	"sha1_hash": "13873a0fd80cafee15d51ac1537a4844d87bfac9",
	"title": "Thirty-six Defendants Indicted for Alleged Roles in Transnational Criminal Organization Responsible for More than $530 Million in Losses from Cybercrimes",
	"llm_title": "",
	"authors": "",
	"file_creation_date": "0001-01-01T00:00:00Z",
	"file_modification_date": "0001-01-01T00:00:00Z",
	"file_size": 52268,
	"plain_text": "Thirty-six Defendants Indicted for Alleged Roles in Transnational\r\nCriminal Organization Responsible for More than $530 Million in\r\nLosses from Cybercrimes\r\nPublished: 2018-02-07 · Archived: 2026-04-02 11:03:06 UTC\r\nA federal indictment was unsealed today charging 36 individuals for their alleged roles in the Infraud\r\nOrganization, an Internet-based cybercriminal enterprise engaged in the large-scale acquisition, sale, and\r\ndissemination of stolen identities, compromised debit and credit cards, personally identifiable information,\r\nfinancial and banking information, computer malware, and other contraband.\r\nFollowing the return of a nine-count superseding indictment by a Las Vegas, Nevada, grand jury alleging\r\nracketeering conspiracy and other crimes, federal, state, local, and international law enforcement authorities\r\narrested 13 defendants from the United States and six countries: Australia, the United Kingdom, France, Italy,\r\nKosovo and Serbia.\r\nActing Assistant Attorney General John P. Cronan of the Justice Department’s Criminal Division, U.S. Attorney\r\nDayle Elieson of the District of Nevada, and Acting Executive Associate Director Derek N. Benner of U.S.\r\nImmigration and Customs Enforcement’s Homeland Security Investigations (HSI) made the announcement.\r\n“Today’s indictment and arrests mark one of the largest cyberfraud enterprise prosecutions ever undertaken by the\r\nDepartment of Justice,” said Acting Assistant Attorney General Cronan.  “As alleged in the indictment, Infraud\r\noperated like a business to facilitate cyberfraud on a global scale.  Its members allegedly caused more than $530\r\nmillion in actual losses to consumers, businesses, and financial institutions alike—and it is alleged that the losses\r\nthey intended to cause amounted to more than $2.2 billion.  The Department of Justice refuses to allow these\r\ncybercriminals to use the perceived anonymity of the Internet as a shield for their crimes.  We are committed to\r\nworking closely with our international counterparts to identify, investigate, and bring to justice the perpetrators of\r\nthese crimes, wherever in the world they operate.”\r\n“The U.S. Attorney’s Office is steadfastly committed to protecting America’s national and economic security,”\r\nsaid U.S. Attorney Elieson. “Criminals cannot hide behind their computer screens. We are working vigilantly with\r\nAmerican and international law enforcement partners to identify and disrupt transnational cybercrime\r\norganizations, such as the Infraud Organization.”\r\n“Criminal cyber organizations like Infraud threaten not just U.S. citizens but people in every corner of the globe,”\r\nsaid HSI Acting Executive Associate Director Benner. “The actions of computer hackers and identity thieves not\r\nonly harm countless innocent Americans, but the threat they pose to our financial system and global commerce\r\ncannot be overstated.  The criminals involved in such schemes may think they can escape detection by hiding\r\nbehind their computer screens here and overseas, but as this case shows, cyberspace is not a refuge from justice. \r\nHSI will continue working with our law enforcement partners in this country and around the world to aggressively\r\ntarget cyber thieves to ensure the perpetrators face the full weight of the law.”\r\nhttps://www.justice.gov/opa/pr/thirty-six-defendants-indicted-alleged-roles-transnational-criminal-organization-responsible\r\nPage 1 of 4\n\nAccording to the indictment, the Infraud Organization was created in October 2010 by Svyatoslav Bondarenko\r\naka “Obnon,” aka “Rector,” aka “Helkern,” 34, of Ukraine, to promote and grow interest in the Infraud\r\nOrganization as the premier destination for carding—purchasing retail items with counterfeit or stolen credit card\r\ninformation—on the Internet.  Under the slogan, “In Fraud We Trust,” the organization directed traffic and\r\npotential purchasers to the automated vending sites of its members, which served as online conduits to traffic in\r\nstolen means of identification, stolen financial and banking information, malware, and other illicit goods.  It also\r\nprovided an escrow service to facilitate illicit digital currency transactions among its members and employed\r\nscreening protocols that purported to ensure only high quality vendors of stolen cards, personally identifiable\r\ninformation, and other contraband were permitted to advertise to members. \r\nAccording to the indictment, Infraud members held defined roles within the organization’s hierarchy. \r\n“Administrators” managed day-to-day operation of and strategic planning for the organization, approved and\r\nmonitored membership, and meted out punishments and rewards to members.  “Super Moderators” oversaw and\r\nadministered specific subject-matter areas within their expertise.  “Moderators” moderated one or two specific\r\nsub-forums within their areas of subject-matter expertise.  “Vendors” sold illicit products and services to Infraud\r\nmembers.  Finally, “VIP Members” and “Members” used the Infraud forum to gather information and to facilitate\r\ntheir criminal activities.  As of March 2017, there were 10,901 registered members of the Infraud Organization. \r\nDuring the course of its seven-year history, the Infraud Organization inflicted approximately $2.2 billion in\r\nintended losses, and more than $530 million in actual losses, on a wide swath of financial institutions, merchants,\r\nand private individuals, and would have continued to do so for the foreseeable future if left unchecked. \r\nThe defendants indicted for their alleged roles in the Infraud Organization’s transnational racketeering conspiracy\r\ninclude:\r\nSvyatoslav Bondarkeno of Ukraine;\r\nAmjad Ali aka “Amjad Ali Chaudary,” aka “RedruMZ,” aka “Amjad Chaudary,” 35, of Pakistan;\r\nRoland Patrick N’Djimbi Tchikaya aka “Darker,” aka “dark3r.cvv,” 37, of France;\r\nMiroslav Kovacevic aka “Goldjunge,” 32, of Serbia;\r\nFrederick Thomas aka “Mosto,” aka “1stunna,” aka “Bestssn,” 37, of Alabama;\r\nOsama Abdelhamed aka “MrShrnofr,” aka “DrOsama,” aka “DrOsama1,” 27, of Egypt;\r\nBesart Hoxha aka “Pizza,” 25, of Kosovo;\r\nRaihan Ahmed aka “Chan,” aka “Cyber Hacker,” aka “Mae Tony,” aka “Tony,” 26, of Bangladesh;\r\nAndrey Sergeevich Novak aka “Unicc,” aka “Faaxxx,” aka “Faxtrod” of the Russian Federation;\r\nValerian Chiochiu aka “Onassis,” aka “Flagler,” aka “Socrate,” aka “Eclessiastes,” 28, of Moldova;\r\nJohn Doe #8 aka “Aimless88;”\r\nGennaro Fioretti aka “DannyLogort,” aka “Genny Fioretti,” 56, of Italy;\r\nEdgar Rojas aka “Edgar Andres Viloria Rojas,” aka “Guapo,” aka “Guapo1988,” aka “Onlyshop,” 27, of\r\nAustralia;\r\nJohn Telusma aka “John Westley Telusma,” aka “Peterelliot,” aka “Pete,” aka “Pette,” 33, of Brooklyn,\r\nNew York;\r\nRami Fawaz aka “Rami Imad Fawaz,” aka “Validshop,” aka “Th3d,” aka “Zatcher,” aka “Darkeyes,” 26, of\r\nIvory Coast;\r\nMuhammad Shiraz aka “Moviestar,” aka “Leslie” of Pakistan;\r\nhttps://www.justice.gov/opa/pr/thirty-six-defendants-indicted-alleged-roles-transnational-criminal-organization-responsible\r\nPage 2 of 4\n\nJose Gamboa aka “Jose Gamboa-Soto,” aka “Rafael Garcia,” aka “Rafael101,” aka “Memberplex2006”\r\naka “Knowledge,” 29, of Los Angeles, California;\r\nAlexey Klimenko aka “Grandhost,” 34, of Ukraine;\r\nEdward Lavoile aka “Eddie Lavoie,” aka “Skizo,” aka “Eddy Lavoile,” 29, of Canada;\r\nAnthony Nnamdi Okeakpu aka “Aslike1,” aka “Aslike,” aka “Moneymafia,” aka “Shilonng,” 29, of the\r\nUnited Kingdom;\r\nPius Sushil Wilson aka “FDIC,” aka “TheRealGuru,” aka “TheRealGuruNYC,” aka “RealGuru,” aka\r\n“Po1son,” aka “1nfection,” aka “1nfected,” 31, of Flushing, New York;\r\nMuhammad Khan aka “CoolJ2,” aka “CoolJ,” aka “Secureroot,” aka “Secureroot1,” aka “Secureroot2,”\r\naka “Mohammed Khan,” 41, of Pakistan;\r\nJohn Doe #7 aka “Muad’Dib;”\r\nJohn Doe #1 aka “Carlitos,” aka “TonyMontana;”\r\nDavid Jonathan Vargas aka “Cashmoneyinc,” aka “Avb,” aka “Poony,” aka “Renegade11,” aka\r\n“DvdSVrgs,” 33, of San Diego, California;\r\nJohn Doe #2;\r\nMarko Leopard aka “Leopardmk,” 28, of Macedonia;\r\nJohn Doe #4 aka “Best4Best,” aka “Wazo,” aka “Modmod,” aka “Alone1,” aka“Shadow,” aka “Banderas,”\r\naka “Banadoura;”\r\nLiridon Musliu aka “Ccstore,” aka “Bowl,” aka “Hulk,” 26, of Kosovo;\r\nJohn Doe #5 aka “Deputat,” aka “Zo0mer;”\r\nMena Mouries Abd El-Malak aka “Mina Morris,” aka “Source,” aka “Mena2341,” aka “MenaSex,” 34, of\r\nEgypt; and\r\nJohn Doe #6 aka “Goldenshop,”aka “Malov.”\r\nDownload Original\r\nIn addition, Novak and “Goldenshop” are charged with three counts each and “Deputat” and Musliu one count\r\neach of possession of 15 or more counterfeit and unauthorized access devices.\r\nThe superseding indictment is the result of an investigation conducted by the Las Vegas Office of Homeland\r\nSecurity Investigations; the Henderson, Nevada, Police Department; the Criminal Division’s Organized Crime and\r\nGang Section; and the U.S. Attorney’s Office for the District of Nevada.\r\nThe international operation to dismantle the Infraud Organization would have been impossible without the\r\nsignificant efforts and timely cooperation of the Justice Department’s Office of International Affairs and\r\nInternational Organized Crime Intelligence and Operations Center; Interpol Rome; Interpol Tirana; the Italian\r\nNational Police (Postal and Communications Police); the Australian Federal Police  and the International Crime\r\nCooperation Central Authority, Australian Government Attorney-General’s Department; the U.S. Diplomatic\r\nSecurity Service, Regional Security Office at U.S. Embassy Tirana, Albania; the City of London Police, DCPCU;\r\nthe French Ministry of Justice, the Paris Prosecutor, L’Office Central de Lutte contre la Criminalité liée aux\r\nTechnologies de l’Information et de la Communication; the judicial and police authorities of the Grand Duchy of\r\nLuxembourg; the Directorate for Organized Crime Investigation, Sector for Cyber Crime Investigation; the Basic\r\nProsecution Office Pristina, Kosovo; and the Ministry of Justice of the Republic of Kosova, Department for\r\nhttps://www.justice.gov/opa/pr/thirty-six-defendants-indicted-alleged-roles-transnational-criminal-organization-responsible\r\nPage 3 of 4\n\nInternational Legal Cooperation and the Special Prosecution Office for High-Tech Crime of the Republic of\r\nSerbia. \r\nThe charges in the indictment are merely allegations, and the defendants are presumed innocent until proven\r\nguilty beyond a reasonable doubt in a court of law.\r\nTrial Attorneys Kelly Pearson and Chimaobim Nwachukwu of the Criminal Division’s Organized Crime and Gang\r\nSection and Assistant U.S. Attorney Chad W. McHenry of the District of Nevada are prosecuting the case.\r\nSource: https://www.justice.gov/opa/pr/thirty-six-defendants-indicted-alleged-roles-transnational-criminal-organization-responsible\r\nhttps://www.justice.gov/opa/pr/thirty-six-defendants-indicted-alleged-roles-transnational-criminal-organization-responsible\r\nPage 4 of 4",
	"extraction_quality": 1,
	"language": "EN",
	"sources": [
		"ETDA"
	],
	"references": [
		"https://www.justice.gov/opa/pr/thirty-six-defendants-indicted-alleged-roles-transnational-criminal-organization-responsible"
	],
	"report_names": [
		"thirty-six-defendants-indicted-alleged-roles-transnational-criminal-organization-responsible"
	],
	"threat_actors": [
		{
			"id": "43cfcac9-ab2f-4f7d-ad3b-b2c09fb672b5",
			"created_at": "2022-10-25T16:07:24.499018Z",
			"updated_at": "2026-04-10T02:00:05.012584Z",
			"deleted_at": null,
			"main_name": "Infraud Organization",
			"aliases": [
				"Operation Shadow Web"
			],
			"source_name": "ETDA:Infraud Organization",
			"tools": [
				"FastPOS"
			],
			"source_id": "ETDA",
			"reports": null
		}
	],
	"ts_created_at": 1775434410,
	"ts_updated_at": 1775792179,
	"ts_creation_date": 0,
	"ts_modification_date": 0,
	"files": {
		"pdf": "https://archive.orkl.eu/13873a0fd80cafee15d51ac1537a4844d87bfac9.pdf",
		"text": "https://archive.orkl.eu/13873a0fd80cafee15d51ac1537a4844d87bfac9.txt",
		"img": "https://archive.orkl.eu/13873a0fd80cafee15d51ac1537a4844d87bfac9.jpg"
	}
}