NEWARK, N.J. – Four alleged members of the notorious FIN9 cybercrime syndicate are facing federal charges today, accused of orchestrating a years-long campaign of digital theft that bled U.S. companies out of over $71 million. The indictment, unsealed today, names Ta Van Tai, aka “Quynh Hoa,” aka “Bich Thuy;” Nguyen Viet Quoc, aka “Tien Nguyen;” Nguyen Trang Xuyen; and Nguyen Van Truong, aka “Chung Nguyen,” as key players in the sophisticated operation.
According to federal prosecutors, the quartet, operating from at least May 2018 through October 2021, systematically breached the computer networks of numerous American businesses. Once inside, they didn’t just poke around – they actively stole non-public information, pilfered employee benefits, and siphoned off funds directly. The scale of the damage is staggering: over $71 million in documented losses, and likely more that remains undiscovered.
“The FIN9 defendants were prolific international hackers who, for years, allegedly used phishing campaigns, supply chain attacks and other hacking methods to steal millions from their victims,” stated U.S. Attorney Philip R. Sellinger. “They did all of this while hiding behind keyboards, VPNs, and fake identities, and even then, the Department of Justice found them. My office remains committed to its pursuit of justice for victims, and cybercriminals everywhere should take notice.”
The indictment details a complex scheme involving not only direct network intrusions but also supply chain attacks – a particularly insidious tactic that exploits vulnerabilities in trusted third-party vendors. Once inside a network, the FIN9 crew didn’t just grab data; they actively manipulated employee benefits programs, redirecting digital rewards like gift cards to accounts they controlled. They also stole gift card information and, brazenly, used stolen personally identifiable information to open accounts at cryptocurrency exchanges and server hosting companies, further obscuring their tracks.
Ta Van Tai, Nguyen Trang Xuyen, and Nguyen Van Truong allegedly fenced the stolen gift cards through a peer-to-peer cryptocurrency marketplace, using a fake name to conceal the source of the illicit funds. FBI Special Agent in Charge James E. Dennehy warned, “Cyber actors cloak themselves in the virtual world, hiding in a space most people can’t see and don’t understand…FBI Newark’s Cyber Task Force and our law enforcement partners use precision and innovative techniques to expose these people for what they are – simple thieves.”
The four defendants are each charged with one count of conspiracy to commit fraud, extortion, and related activity in connection with computers; one count of conspiracy to commit wire fraud; and two counts of intentional damage to a protected computer. If convicted on all counts, each faces a maximum sentence of up to five years in prison. This case serves as a stark reminder that even the most sophisticated cybercriminals are not untouchable, and the long arm of the law will reach them, no matter where they hide.
Related Federal Cases
- Four Hackers Steal $100M in Gaming Tech, Helicopter Software · New Jersey
- Anthony Clark Convicted in $16M FIFA Coin Heist · Texas
- NJ Teen Pleads Guilty to Bomb Threats in Alpine, Texas · North Carolina
- Sergey Vovnenko Busted in Global Hacking Conspiracy · New Jersey
- Timothy Livingston Sentenced in $1.3M Spam & Hack Scheme · New Jersey
Key Facts
- State: New Jersey
- Agency: DOJ USAO
- Category: Cybercrime
- Source: Official Source ↗
🔒 Get the grimiest stories delivered weekly. Subscribe free →
Browse More
