5 December 2022

Spanish police dismantle 'Black Panthers' SIM swap group


Spanish police dismantle 'Black Panthers' SIM swap group

The Spanish National Police have arrested 55 members of a criminal organization known as ‘Black Panthers’ involved in bank scams via SIM swapping, including an alleged leader of the gang.

The group was operating four specialized interconnected activity cells that used various techniques like social engineering, vishing (voice phishing), call forwarding, phishing, and carding to conduct fraud scams.

Once obtaining the duplicate SIM card from the victim's phone, the perpetrators had access to the verification codes that banks send to their customers via SMS to confirm a money transfer, the police said in a press release.

In some cases, the scammers even acted as service technicians for local reseller offices of the targeted telecom firms, stealing the account credentials of their employees. This gave the scammers access to the database of the telephone operators and allowed to obtain the personal data of the victims and make duplicate SIM cards.

The “carding” cell of Black Panthers also bought ID and credit card numbers on the dark web using cryptocurrency and then used the information to purchase luxury goods to later resell them in stores and second-hand shops.

The police said that the gang managed to defraud at least 100 victims, with losses estimated to be about €250,000.


Back to the list

Latest Posts

Russia-linked Nodaria APT adds new Graphiron infostealer to its toolkit

Russia-linked Nodaria APT adds new Graphiron infostealer to its toolkit

The new infostealer was observed in attacks targeting Ukrainian organizations.
8 February 2023
CISA releases tool to recover encrypted VMware ESXi servers

CISA releases tool to recover encrypted VMware ESXi servers

According to CISA’s list of bitcoin addresses, over 2,800 ESXi servers have been encrypted to date.
8 February 2023
Threat actors target Ukrainian government agencies with Remcos spyware

Threat actors target Ukrainian government agencies with Remcos spyware

The attack involves a phishing email ostensibly sent by Ukrtelecom, a major Ukrainian internet service provider.
8 February 2023