Content material warning: Due to the character of among the actions we found, this sequence of articles accommodates content material that some readers might discover upsetting. This contains profanity and references to medicine, drug dependancy, playing, pornography, violence, arson, and intercourse work. These references are textual solely and don’t embrace photographs or movies.
Following on from Half One in our sequence on menace actors investing in enterprise pursuits outdoors cybercrime, we check out so-called ‘white’ actions (a time period utilized by some cybercrime discussion board customers, referring to purportedly reputable companies). Whereas not essentially unlawful themselves, these actions are sometimes related to, and tainted by, legal exercise.
We acknowledge that legality can fluctuate relying on jurisdiction. Nevertheless, the breadth and depth of those actions are such that we’ve to categorize them by some means, and utilizing the menace actors’ personal classes is a logical if imperfect alternative.
Key findings of Half 2
- On legal boards, menace actors are discussing a variety of ‘reputable’ enterprise pursuits (often called ‘white’ on the boards), spanning a number of sectors and industries – together with gold, diamonds, actual property, building, shares and shares, eating places, schooling, and lots of extra
- Whereas a few of these actions might relate to cash laundering, some menace actors may be looking for to speculate and diversify
- Many menace actors sought, and acquired, recommendation from friends on the place and how you can make investments cash
- Among the enterprise pursuits we report on right here might have vital ramifications for the safety trade – together with funding in cyber safety firms; trying to evade export and import restrictions; and working proxy, internet hosting, and VPN companies
- In some circumstances, discussion board discussions revealed info and pictures that would doubtlessly be used to trace, geolocate, and/or establish menace actors
Shell firms
Whereas shell firms are sometimes created for cash laundering functions (see Half One), we discovered a couple of fascinating variations on the boards.
Shell-companies-as-a-Service
One menace actor posted an advert providing to promote three US-based ‘turnkey’ firms and financial institution accounts ($3900), or register a brand new US firm and three financial institution accounts below a purchaser’s consultant ($4990) or their very own consultant ($3500). This publish was accompanied by {a photograph} of a State of California Assertion of Info for a Non-Revenue Company. The menace actor obscured some particulars, however some names, addresses, and a doc reference quantity have been nonetheless seen.
Determine 1: A menace actor posts an advert for creating shell firms
Determine 2: The identical menace actor posts an instance assertion of data. Word that whereas the menace actor redacted a few of this themselves (with slips of white paper), different doubtlessly helpful info (which we’ve redacted in black) was nonetheless seen
We additionally noticed a service providing to open firms within the UK, Gibraltar, and Panama ($1900) to facilitate a way known as “cuckoo smurfing,” which entails insiders in cash companies intercepting reputable transactions and mixing them with illicit ones.
This menace actor supplied an instance of an organization which they claimed to have registered, together with the identify and firm quantity. In accordance with the person, the service features a digital workplace, a UK deal with, articles of affiliation, certificates of incorporation, and a UK telephone quantity.
We regarded into the instance firm and located that it had been lively for over a 12 months earlier than being compulsorily struck off. Through Firms Home (an company that holds the general public register of UK firms), we have been in a position to establish the director, and the identify and deal with of the company that registered the corporate (and which has acted as an agent for a number of different UK firms, a few of that are nonetheless lively – though some or all of those could also be reputable).
Determine 3: A menace actor posts an advert for registering firms and descriptions a way they name ‘cuckoo smurfing’
Determine 4: The identical menace actor gives an instance of their “newest work,” which we checked on Firms Home
Evading restrictions
One menace actor sought recommendation on how you can register firms for software program with “company verification…no, it’s not Cobalt Strike.”
One other person mentioned that they may create a US-based firm to order “delicate applied sciences.” The person acknowledged that “chips/software program/engines/different will probably be despatched to Latin America, from there to every other place we agree.”
Determine 5: A menace actor presents to create firms “to order delicate applied sciences”
Cybersecurity
Hash decryption
We discovered a proposal to arrange a hash decryption service, utilizing Google Cloud, AWS, or Azure. Whereas it’s not essentially unlawful to function or use a hash decryption service, cybercriminals can use them to ‘break’ hashes (e.g., from knowledge breaches) and get well plaintext passwords.
Funding
We additionally noticed a advice to put money into a distinguished cybersecurity vendor (together with particulars of a rumor that it was going to accumulate one other firm). Irony apart, this raises the regarding risk that menace actors might develop into shareholders (and due to this fact in a position to vote on company actions, obtain dividends, and many others.) of an organization that tracks and disrupts menace actors.
Determine 6: A menace actor recommends investing in a really well-known cybersecurity vendor
Begin-ups
We noticed two proposals to create safety start-ups. The primary was “to develop exploits and analyze software program and {hardware} vulnerabilities.” The opposite centered on “authorized methods to promote already discovered vulnerabilities to those that didn’t ask for it.” In each circumstances, customers urged that this might be higher suited to the US or Europe than Russia.
One person additionally took the chance to criticize the cybersecurity trade (“menace intel…is nothing, simply snake oil…apparently it’s worthwhile and so they purchase it, however the prices are 3 discussion board parsers and a weblog on Twitter”).
Determine 7: A menace actor promotes their cybersecurity start-up on a legal discussion board, and notes that they’re looking for “folks with related data” in vulnerability analysis, debugging, coding, and fuzzing
IT and web companies
On-line companies
Threads on this subject included:
- An present area buying and selling enterprise
- An API market
- A name for enterprise companions “to promote our companies…we’re 14 years previous [sic] company dealing in IT options.” Stated options included web site and software program growth, social media, and e mail advertising and marketing.
Determine 8: A menace actor seeks a enterprise companion for a pre-existing “IT options” firm
Cellular apps
Numerous menace actors are looking for funding in cell apps, together with a cell health app startup, and an funding alternative for a pre-existing suite of cell purposes developed in Kazan, Russia.
This suite, distributed as a franchise, included apps for:
- Loyalty factors and affiliate applications
- Gives
- Facilitating buyer suggestions
- Assortment of consumer knowledge, and extra
Some customers urged that this was a type of multilevel advertising and marketing (MLM), akin to a pyramid scheme – extra on which later on this sequence.
Determine 9: A menace actor seeks a companion to work on a brand new cell health app; the work contains “communicat[ing] with purchasers and preserve[ing] Instagram…the fee is a 3rd of the mission, it is a startup”
Social networking
Threads on this vein included an funding alternative for an “Instagram killer unicorn” and a marketing strategy to arrange a social community hosted within the UAE.
Bodily companies
One menace actor advisable that their friends “create your individual service for repairing Apple gadgets,” together with bypassing iCloud activation, putting in jailbreaks, eradicating Apple IDs, and many others.
Determine 10: A menace actor invitations their friends to contemplate creating their very own service “for repairing Apple gadgets…it’s related now, investments are minimal [and] the work is white”
Curiously, we additionally noticed a marketing strategy for digitizing VHS tapes.
Cryptocurrency/forex exchanges
We famous a number of enterprise proposals and funding adverts regarding this subject, together with:
- Exchanges utilizing Tor/I2P and a mixer, with out KYC (Know Your Buyer), and due to this fact splendid for cash laundering
- NFT marketplaces (together with a ready-made service, accessible to consumers for 1 million rubles)
- An funding alternative for cloud mining (“the place you bought the cash from doesn’t matter to me…the approximate return in your funds…with an funding of 200-300k inexperienced [i.e., USD]…[is] tens of millions of {dollars}”)
- An funding alternative for the event of GPU farms in Ukraine
- A proposal to develop a brand new cryptocurrency {hardware} pockets.
Determine 11: A menace actor appears to be like for funding for the event of GPU farms in Ukraine (posted previous to the Russian invasion of Ukraine in 2022)
One person acknowledged that they’d come into possession of a “small workplace area (80sqm) on the outskirts of London…inside which there are a dozen servers [and] a beautiful 10 GBPS web channel that has been equipped and already paid for 2 years.”
The person mentioned: “I’m legally in England, I’ve my very own enterprise (one other one)…how can I take advantage of this whole system to squeeze out most income?” Concepts from different customers included: sport servers, internet hosting, and changing into an ISP (this final from a person who claimed to have operated an ISP for 13 years). Ultimately, the person determined to create an Ether mining farm.
Determine 12: A thread by which a menace actor sought enterprise concepts and attainable partnerships for workplace area “on the outskirts of London,” full with a “10 GBPS Web channel”
Internet hosting and proxy companies
We noticed a number of proposals and present companies regarding internet hosting and proxy companies (“I purchased all gear, invested round $10k”; “I personal a number of…SaaS, IoT, e-commerce and brokerage, 4 in USA, 1 in UK”).
This latter menace actor claimed that their SaaS and internet hosting companies have been “gray,” that they’d made 80k through PayPal on their e-commerce enterprise, and that for brokerage “I simply do exchanges below my very own CPA licence.”
Determine 13: A menace actor seeks recommendation regarding their proxy service
We additionally noticed a thread referring to a pre-existing, five-year-old internet hosting firm with its personal knowledge middle, “positioned in a bomb shelter of a former navy plant at a depth of 5 meters underground…every little thing is supplied and dealing, however there are few purchasers.”
Determine 14: A menace actor seeks recommendation on how you can receive extra purchasers for his or her pre-existing internet hosting firm “positioned in a bomb shelter of a former navy plant”
Menace actors working internet hosting or proxy companies (or every other ‘reputable’ IT or on-line service) raises the opportunity of customers’ knowledge and actions being illicitly inspected, stolen, offered, or in any other case misused – in addition to menace actors with the ability to use their very own infrastructure for assaults.
Fronts
There have been a number of solutions for IT/internet-related ‘fronts’ for cash laundering and legitimizing revenue, together with a “No Audit Logs VPN Service”, a “Shitcoin & NFT Meme mission”, and an “On-line On line casino Undertaking” which might enable a menace actor to “coincidentally win…an enormous six determine jackpot.”
Determine 15: A menace actor posts a number of solutions for “reputable enterprise[es] which I can combine my soiled funds in”
Gold and diamonds
Funding
We discovered an in depth information on investing in gold, which the writer had apparently performed since 2010. The poster supplied detailed choices:
- Shopping for bullion (simple however requires an 18% tax)
- Shopping for funding cash (no tax, accessible and worthwhile, however dearer)
- Opening a gold financial institution deposit (appropriate for short-term traders)
- Shopping for shares in gold mining firms (larger threat, however doubtlessly larger income).
The menace actor famous that the optimum answer for many traders is to open a gold deposit in a financial institution, and shared a number of (Russian) hyperlinks.
Determine 16: A menace actor posts a information on investing in gold, detailing a number of strategies
Cryptocurrency for cash and gold
A person shared info on how you can trade Monero for cash and gold bars anonymously: utilizing licensed suppliers on a P2P offshore market (“Liberland Defend”) to buy US Mint gold cash, and bars from PAMP Suisse, which the customer took supply of at a “stealthy deal with that I often use to obtain money by mail once I trade XMR for money on LocalMonero.” The client purportedly took among the bars to California, and exchanged them for money.
Determine 17: A menace actor (the identical person who beforehand admitted to bribing homeless folks with cash or medicine to get them to open financial institution accounts, in Half One) describes a way for exchanging Monero for cash and gold bars
Diamonds
One menace actor famous that diamonds could be modified to money, could be hidden in a security deposit field in a relative’s identify, and are untraceable (“except your [sic] silly.”).
This person additionally outlined a scheme to launder utilizing diamonds:
- Study the diamond commerce and get a supplier’s license
- Go to “nations in Africa,” purchase diamonds for $10,000 and ask for a receipt for $300,000
- Give the diamonds to a different supplier, together with $350,000 in ‘soiled cash’
- Ask that supplier to ship the $350,000 to your checking account, and supply a receipt.
This person additionally argued that diamonds are higher than gold as a result of it’s “simpler to move by means of customs…[and] everybody within the trade is soiled and tight-lipped.”
Determine 18: A menace actor outlines the benefits of buying and selling diamonds on the subject of cash laundering, describing it as “a cash launderes [sic] moist dream”
Shares, shares, and investments
Threads on this subject included:
- Customers looking for recommendation on how you can purchase shares and shares, how you can choose a dealer, and whether or not they need to put money into American or Russian firms, or in in nations (“primarily China”) that “need to occupy a sure enterprise area of interest in our nation”
- A person inquisitive about long-term funding ($50,000-$100,000) within the economies of overseas nations (“the precedence will not be profitability, however the security of the deposit…and free entry to funds”)
- A person looking for “contacts of American entrepreneurs” for investing in a startup
- A person planning to speculate their cash in “buying and selling options”, with a request for companions “who can register the corporate and open the accounts on the worldwide exchanges.”
Determine 19: A menace actor seeks recommendation on investing in China
We additionally noticed recommendation and proposals, akin to:
- A advice to put money into Index Funds “just like the S&P 500, it gives a good price of return of 11% 12 months over 12 months”
- A proposal to co-invest (“we decide the capital you commerce, I inform you when to enter and exit the place and for a way a lot. Revenue sharing: 60% for you, 40% for me”)
- A person primarily based in London “searching for a enterprise companion for a worthwhile monetary funding”
- Recommendation on choosing a dependable dealer (together with the be aware that “in mild of current occasions [presumably the invasion of Ukraine in 2022], they [American brokers] hardly work with the Russian Federation, however there are all the time workarounds”)
- Detailed guides on launching startups, together with recommendation on securing traders, making shows, pitching, and making use of to enterprise accelerators
- A publish by a person claiming to be an investor and searching for areas to put money into.
Determine 20: A menace actor who claims to be “residing in London” posts on a legal discussion board “searching for a enterprise companion…for a worthwhile monetary funding…precedence is given to folks from the UK”
We additionally famous quite a few threads the place customers mentioned they’d a particular amount of cash (often tens or tons of of hundreds of {dollars}) and wished funding concepts. For instance, we noticed a thread by which a person who “earned a small capital on matters that I regrettably tempered” wished recommendation on how and the place to speculate “in white at 20-30% each year.” They proposed a number of concepts, together with automotive resale, a product from China, and citizenship for Russia, Romania, and Moldova.
A person replied with in-depth recommendation, earlier than commenting: “I can even give the standard advice: return to these matters the place you made cash.” (This latter level was a typical theme, and we’ll cowl reinvesting in cybercrime later on this sequence.)
Determine 21: A menace actor asks their friends the place to speculate “a small capital [that I acquired from] matters that I regrettably tempered”
Different threads of this nature included:
Somebody who mentioned they have been about to begin a two-year sentence in a US federal jail (for trafficking firearms) and wished to speculate $2500 in one thing, in order that they might have funds once they have been launched
- The place to speculate $100,000 in a “gray” enterprise (solutions included actual property, shares, crypto, shopping for a bar, renting automobiles, and gold)
- The place to speculate 100-300k rubles (solutions included shares, buying and selling, actual property, building, and automobiles)
- The place to speculate $700,000 (solutions included sport growth, shopping for shares in distinguished tech firms, and accommodations)
- A person who was searching for funding suggestions “within the sizzling new traits because of the conflict [presumably the Russian invasion of Ukraine], particularly in oil and fuel”
- The place to speculate $80,000-$100,000 (this thread included the person offering a number of biographical particulars about themselves and their acquaintances)
- What enterprise to open in Russia with $500,000.
This latter thread additionally included some biographical info, together with a remark that seemingly resonated with quite a lot of customers: “There isn’t any pension in our career, brother.”
Determine 22: A (purportedly) US-based menace actor, about to go to jail, seeks funding recommendation on a legal discussion board
Determine 23: A menace actor claiming to be an investor asks their friends to submit funding proposals, however states that they don’t seem to be inquisitive about scams, building, actual property, medicine, or eating places
An fascinating sidenote: on this latter thread, a person additionally shared a Vocaroo clip containing a Russian rap tune themed round cybercrime. (Excerpt: “It was that you would get banned for engaged on RU / Now it’s virtually a fucking matter of routine / Shopping for all of the visitors to their fucking lockers / Killing bots for pennies like beggars.”)
Actual property
Funding
We noticed a number of threads by menace actors looking for to put money into actual property, together with:
- A person asking about buying actual property within the UAE and whether or not authorities there require details about the supply of funds
- A person, after having “by no means formally labored”, requested about investing in actual property and how you can “seem white and fluffy earlier than the state (Russia)”
- A query about how you can purchase actual property in Europe in case you’re primarily based within the Russian Federation (solutions included: wanting into legalizing funds, saying the cash was a present from a relative, and utilizing NFTs).
Determine 24: A menace actor asks their friends whether or not authorities within the UAE require details about the supply of funds when buying actual property there
Recommendation
We additionally noticed threads by menace actors already concerned in actual property. These included a way of utilizing plots of land to launder cash: “I discovered grime low cost plots of land in the midst of the deserts and mountains. The sellers don’t examine backgrounds or credit score…I actually enquired about one final evening and signed the contract this morning.”
Determine 25: A menace actor shares particulars of a scheme for cash laundering through plots of lands
We additionally discovered a information on actual property tasks in rural areas, together with costs, building prices, ROI, and companies (LLCs, money financial institution transfers, skilled contractors) primarily based in St Petersburg and Moscow. The writer (who has apparently “been constructing for a few years”) talked about particular tasks they’d labored on, and uploaded two images, probably regarding these tasks.
Determine 26: A menace actor shares {a photograph} which may be associated to an actual property mission they labored on. The unique supply is unclear
Lastly, we famous a thread by a person who claims to know an acquaintance with an actual property firm: “In case you are searching for methods to launder your cash I can organize a deal, as a result of he accepts crypto. 2 room flats (64sqm) are 54,000 EUR.”
Trade discussions
One person puzzled why “there appears to be a rising pattern for…turning to property…what occurred to sunbed salons, tattoo parlors, automotive washes, canine breeding, or hospitality?…I’m strictly talking from a British perspective and don’t know what the scenario/traits are in USA/Europe.” Customers commented that “actual property is so common…as a result of not solely is it fairly simple to do however you’ll be able to clear lots in a a lot shorter period of time.”
Determine 27: Menace actors focus on the “rising pattern for drug sellers turning to property for cash laundering”
Building
We noticed an in depth scheme for benefiting from the reselling of building supplies (wooden, metals cement, concrete, mortar, and many others.). The scheme concerned discovering suppliers (a number of Russian suppliers have been named), providing to promote their items for a small proportion, and looking for consumers on Avito (a Russian categorized advertisements market) and VKontakte. The thread included a number of screenshots from a WhatsApp dialog, that includes a photograph of a building website and a screenshot of a financial institution switch affirmation.
Determine 28: One among a number of WhatsApp screenshots in a thread on “getting cash from constructing supplies.” Word the {photograph} of a location, and an connected financial institution switch affirmation (the person additionally posted a separate screenshot of this). Whereas among the info within the financial institution switch affirmation was redacted, it nonetheless featured some doubtlessly helpful info, together with the quantity and the date and time
Furthermore, we noticed a number of building funding alternatives and schemes, together with:
A person who solicited recommendation on the perfect scheme to generate income upfront earlier than promoting homes/flats (“I discovered that collective funding scheme is okay, any alternate options?”)
An funding alternative ($500,000+) for a building mission in Russia, with an ROI of 20% each year (2-5 years)
An funding alternative ($500,000; ROI: double in two years) in an condominium complicated mission. Apparently the person couldn’t get a mortgage from the financial institution, in order that they turned to a cybercrime discussion board (“I don’t care about coloration [i.e., if the money is from ‘white’, ‘grey’, or ‘black’ activities], I can begin it up and get it out superbly”).
Determine 29: A menace actor seeks funding of $500,000 for “the development of an condominium complicated”
Eating places and catering
Eating places
We noticed a number of proposals and pre-existing companies regarding eating places, together with a proposal to begin a meals supply enterprise throughout the COVID-19 pandemic. One person (considerably paradoxically, given their membership of a legal discussion board), famous that “it’s a query of inside ethics whether or not to generate income from an epidemic.”
Determine 30: A menace actor proposes beginning a meals supply enterprise throughout the COVID-19 pandemic, and seeks enterprise recommendation from their friends
We additionally noticed an funding alternative in a pre-existing catering/pizza supply enterprise with an annual income of 5,000,000 rubles. The funding sought was between 300,000 – 2,000,000 rubles, to open a second retailer.
Determine 31: A menace actor seeks “an investor or enterprise companion” in a pre-existing and “utterly white” pizza supply firm
Alcohol
A menace actor was inquisitive about buying another person’s alcohol enterprise. They talked about a value, famous that the enterprise had a license and the related documentation, and requested for recommendation on acquisitions from different customers.
Determine 32: A menace actor asks their friends to explain the potential “pitfalls” of buying an alcohol enterprise
On one other thread, we noticed a person recommend investing in a barrel of whisky after which promoting it for revenue.
Ice cream wars
Of all issues, we famous a menace actor who wished to launch an ice cream enterprise. They requested others whether or not it might be possible to open a stall with 200,000 rubles.
Determine 33: A menace actor proposes opening an ice cream stall
In the identical thread, one other person, apparently an ice cream enterprise proprietor themselves (“the grasp of the ice cream enterprise”) confessed to having dedicated arson in opposition to a competitor’s ice cream kiosk within the early 2000s (now that “the statute of limitations…has already handed”). They supplied detailed details about what occurred and the way they did it (“a crowbar, a plastic bottle with gasoline, a wick on an extension wire, matches… I observed a vertical hole pipe protruding on the roof [of the kiosk]… I poured the entire bottle into it, stuffed a wick soaked in gasoline, and set it on hearth… at about ten o’clock the service provider himself arrived with a crane. They loaded the stall onto a truck and I by no means noticed that enterprise or that stall once more”).
Training
Coding college
A menace actor who “labored on logs for a very long time, collected capital” (i.e., they profited from infostealers) had an concept to open “a programmer college within the course of net growth,” geared toward 16-year-olds. The person famous that there’s little competitors and “no in-person colleges in my million-plus inhabitants”, and proposed charging college students 400 rubles per tutorial hour.
Determine 34: A menace actor proposes establishing a “programmer college” geared toward “schoolchildren 16+ years previous,” with capital they acquired from “work[ing] on logs for a very long time”
On-line programs
A person requested for recommendation on how you can promote video programs, info merchandise, webinars, seminars, teaching, coaching, something, and asks for funding of “not more than 1000 rubles.” That is probably associated to some type of visitors era exercise (see Half Three of this sequence).
Tobacco and vaping
Tobacco merchandise
One menace actor was inquisitive about promoting tobacco merchandise. Customers commented that the market is dominated by suppliers in Ukraine and Belarus, and urged vapes (“buying them in China from a provider prices 45-100 rubles”). One other person talked about that they’ve a vendor for counterfeit cigarettes, however just for supply inside Russia.
E-liquid (and an argument)
A menace actor famous that for the final two years they’ve been promoting e-liquid to schoolchildren, making 100-200 Euros per thirty days. One other person (and do not forget that that is on a legal discussion board) expressed outrage: “I’m studying this as a dad or mum…don’t you fucking have youngsters?”).
Entertainingly, the 2 menace actors started to argue (“Within the shops there’s alcohol, cigarettes…possibly you must go to the mommies’ discussion board?”; “LEAVE YOUR ADDRESS…WE’LL COME NOW, WHEREVER YOU ARE”; “I don’t give a fuck about different folks’s youngsters”, and many others.).
One other menace actor famous: “I’m laughing…[they] got here up with a enterprise that could be a hundred years previous and which brings in as a lot as 200 euros a month!”
Determine 35: A menace actor describes a scheme for promoting e-liquid to schoolchildren, which sparked an argument
Shopping for and promoting debt
A menace actor determined to get entangled in chapter auctions, to purchase land plots, homes, equipment, and gear.
Determine 36: A menace actor decides to get entangled in chapter auctions, and asks their friends for “hyperlinks to bidding aggregators or possibly somebody might need some helpful video programs”
One other opened a dialogue on shopping for and promoting debt, noting that “Tinkov Financial institution [a Russian commercial bank] accepts money owed as licensed capital when opening an LLC by means of them.”
Movies
We noticed a proposal to speculate money in a film with a “legit ROI with affordable phrases.”
Determine 37: A menace actor seeks funding in a film
Charities and NGOs
Organising an LLC
A person requested for OPSEC help in creating an LLC. They proposed a scheme:
- Open an account utilizing a deceased or aged particular person’s particulars
- File a church below a special identify in New Mexico
- File the LLC below the identify of the church
- Make weekly deposits within the checking account
- Conduct their “operation”
- Use “slot apps” to scrub the income, or ship themselves the cash to the church as tithes.
Different customers supplied particular solutions, together with submitting the LLC’s articles of formation with the right company in New Mexico, checking how you can file an LLC for a church, and submitting for 501(c)(3) standing to acquire tax exemption. Additionally they advisable “staying legally compliant.”
Determine 38: A menace actor seeks OPSEC recommendation for creating an LLC below the identify of a church in New Mexico. Word that whereas establishing an LLC is after all not unlawful in itself, the proposed scheme right here seems to be explicitly legal (be aware the acknowledged intention to “wash the cash”)
Determine 39: In the identical thread, one other person gives particular technical suggestions on the proposed scheme
‘Huge nameless contributions’
We famous an enquiry from a person (presumably a launderer) on jurisdictions that enable non-profits, charities, or NGOs to “settle for huge nameless contributions…I have to arrange a charity, NGO or non-profit for a consumer whose money companies are at their restrict.” Responses included recommendation to “keep on with US entities…in case you dwell in California and also you accumulate a cheque from a non-profit in Guinea-Bissau, that could be a main crimson flag…you’ll be able to simply open LLCs, S-Corps, even 501(c)(3) non-profits with out your identify or workplace ever touching the registry; there are tons of of regulation corporations completely satisfied that can assist you with this.”
Additional particular recommendation on privateness, different crimson flags, non-profit govt salaries, donation caps, and promotional exercise adopted.
Determine 40: A person gives technical recommendation on establishing a non-profit for cash laundering
Different schemes
We additionally famous a wide selection of different pre-existing companies, funding proposals, and concepts for start-ups, together with, however not restricted to:
- A taxi service
- A courting website
- Rising microgreens
- Motocross
- Meals vehicles
- Cash laundering utilizing Steam, TikTok, and Fiverr
- Promoting luxurious watches
- A magnificence salon
- A tattoo parlor
- Reselling protecting masks and hand sanitizer (throughout the COVID-19 pandemic)
- A prepper/survivalist retailer
- web optimization for plumbers, contractors, and many others.
- Wholesale and retail of honey
- Manufacturing gazebos and furnishings
- Drive-through espresso outlets
- Photograph cubicles
- Thermal inspection of homes
- A slingshot taking pictures vary
- Inside design
- Aerial pictures
- Laundry companies
- Rising crickets for pet shops
- Reselling footwear
- An escrow service
- A on line casino
- An Arabic restaurant in Moscow
- Bizarrely, promoting Soviet-era fuel masks on eBay and Amazon
Determine 41: A number of customers contribute to a dialogue on concepts for companies as fronts for cash laundering
Determine 42: A menace actor suggests reselling protecting masks and hand sanitizer on the peak of the COVID-19 pandemic
Determine 43: A menace actor sketches out a number of ‘reputable’ enterprise concepts, together with “a slingshot taking pictures vary,” “inside design,” “drones (aerial pictures),” “cleansing and portray of alloy wheels,” and “rising crickets for pet shops”
We additionally noticed a suggestion {that a} group of customers ought to ‘membership collectively’ to begin a “white enterprise” akin to e-commerce, or purchase an present enterprise.
All in all, menace actors are discussing, investing in, and working a bewildering array of so-called ‘reputable’ companies on legal boards. This has some regarding implications usually, but additionally particularly for the safety trade. For instance, menace actors holding shares in a cybersecurity vendor, or working internet hosting and proxy companies, might adversely affect belief, privateness, and makes an attempt to trace and disrupt cybercrime.
Nevertheless, as we’ll focus on later on this sequence, these challenges are additionally accompanied by alternatives. In lots of discussions, for instance, menace actors reveal one thing about themselves – whether or not that’s particular, identifiable, biographical info, or places, or different info that might be helpful to investigators.
Earlier than that, in Half Three of this sequence, we’ll discover among the extra doubtful enterprise pursuits we discovered throughout our investigation.
