Indonesia Takes Down 14-Year National Cybercrime Network

Security researchers have dismantled a sophisticated cybercrime network in Indonesia that has been operating for over 14 years. The network, discovered by Malanta.ai, included more than 320,000 domains, some of which were government subdomains hijacked by the operators. Thousands of malware-laden Android apps were used in the campaign, resulting in the theft of over 50,000 gambling credentials. The attackers also utilized Amazon Web Services and Firebase for command and control operations, leading to concerns of possible nation-state involvement. The scale and complexity of the operation suggest a level of funding and organization typically associated with state-sponsored attacks.