International crackdown on RAT spyware which takes total control of victims’ PCs
A hacking tool that was able to give full remote control of a victim’s computer to cybercriminals has been taken down as a result of an international law enforcement operation targeting the sellers and users of the Imminent Monitor Remote Access Trojan (IM-RAT).
The investigation, led by the Australian Federal Police (AFP), with international activity coordinated by Eurojust and Europol, resulted in an operation involving numerous judicial and law enforcement agencies in Europe, Colombia and Australia.
Coordinated law enforcement activity has now ended the availiblity of this tool, which was used across 124 countries and sold to more than 14 500 buyers. IM-RAT can no longer be used by those who bought it.
Search warrants were executed in Australia and Belgium in June 2019 against the developer and one employee of IM-RAT. Subsquently, an international week of actions was carried out this November, resulting in the takedown of the Imminent Monitor infrastructure and the arrest at this stage of 13 of the most prolific users of this Remote Access Trojan (RAT). Over 430 devices were seized and forensic analysis of the large number of computers and IT equipment seized continues.
Actions were undertaken this week in the framework of this operation in the following countries: Australia, Colombia, Czechia, the Netherlands, Poland, Spain, Sweden and the United Kingdom.
A powerful computer highjacking tool
This insidious RAT, once installed undetected, gave cybercriminals free rein to the victim’s machine. The hackers were able to disable anti-virus and anti-malware software, carry out commands such as recording keystrokes, steal data and passwords and watch the victims via their webcams. All that could be done without a victim’s knowledge.
This RAT was considered a dangerous threat due to its features, ease of use and low cost. Anyone with the nefarious inclination to spy on victims or steal personal data could do so for as little as US$25.
Victims are believed to be in the tens of thousands, with investigators having already identified evidence of stolen personal details, passwords, private photographs, video footage and data.
Daniela Buruiana, National Member for Romania at Eurojust and Chair of its Cybercrime Team, said: ‘The cybercriminals selling and using the IM-RAT affected the computers of tens of thousands of victims worldwide. We would like to thank all the judicial and law enforcement authorities involved for the excellent results achieved in this operation. These authorities have shown an extremely high level of commitment and legal and technical expertise. Effective cooperation and coordination among all the relevant actors are vital in overcoming the obstacles to investigations due to the global scale and technical sophistication of this type of crime.’
Steven Wilson, Head of Europol’s European Cybercrime Centre (EC3), recently said:
“We now live in a world where, for just US$25, a cybercriminal halfway across the world can, with just a click of the mouse, access your personal details or photographs of loved ones or even spy on you. The global law enforcement cooperation we have seen in this case is integral to tackling criminal groups who develop such tools. It is also important to remember that some basic steps can prevent you falling victim to such spyware: we continue to urge the public to ensure their operating systems and security software are up to date.”
The public and businesses can follow simple steps to help protect themselves from such malware, including:
- Update your software, including anti-virus software;
- Install a good firewall;
- Don’t open suspicious e-mail attachments or URLs – even if they come from people on your contact list; and
- Create strong passwords.
For more advice on how to protect yourself against Remote Access Trojans, check Europol’s crime prevention advice.
Contacting Eurojust: Ton van Lierop, Eurojust spokesman, firstname.lastname@example.org
00 31 70 412 5518, Mobile: 00 31 6 27194773
Contacting Europol: email@example.com, Media Line: +31(0)70 302 5001
For all Eurojust press releases, please see www.eurojust.europa.eu (Press centre)
If you would like to have Eurojust press releases delivered electronically to your inbox, please complete and submit this subscription form.
Latest News from
EU support for Italian biotech's red blood cell technology to treat rare diseases07/08/2020 09:25:00
EIB signs €30 million agreement supporting EryDel's red blood cell (RBC) innovation strategy.
Read-out of the phone call between Commission President Ursula von der Leyen and Lebanese Prime Minister Hassan Diab06/08/2020 13:25:00
Commission President von der Leyen spoke this morning with Hassan Diab, Prime Minister of Lebanon.
State aid: Commission approves €665 million Austrian scheme to support non-profit organisations and their related entities affected by the coronavirus outbreak06/08/2020 10:25:00
The European Commission has approved a €665 million Austrian scheme to support non-profit organisations (NPOs) and their related entities in the context of the coronavirus outbreak.
Statement by Commissioner for Crisis Management Janez Lenarčič on the explosion in Beirut, Lebanon05/08/2020 16:10:00
Statement given by Commissioner for Crisis Management Janez Lenarčič on the explosion in Beirut, Lebanon.
Mergers: Commission opens in-depth investigation into the proposed acquisition of Fitbit by Google05/08/2020 13:25:00
The European Commission has opened an in-depth investigation to assess the proposed acquisition of Fitbit by Google under the EU Merger Regulation.
State aid: Commission approves €200 million voucher scheme to support access to broadband services by low-income families in Italy05/08/2020 09:25:00
The European Commission has approved under EU State aid rules a €200 million voucher scheme to help low-income families in Italy access high-speed broadband services.
Declaration of the High Representative on behalf of the EU on the postponement of the Legislative Council elections in Hong Kong04/08/2020 13:25:00
As set out in the Council conclusions of 24 July, the EU is following closely the political situation in Hong Kong and reiterates that it is essential that the Legislative Council elections take place in an environment which is conducive to the exercise of democratic rights and freedoms as enshrined in the Hong Kong’s Basic Law.
Dietary sugars – new date in 2021 for safety assessment04/08/2020 11:33:00
The timing of EFSA’s assessment of the safety of dietary sugars has been revised due to the impact of the COVID-19 pandemic on the review of the exceptionally high volume of scientific information being considered.
Member States' compliance with EU law in 2019: more work needed04/08/2020 10:38:00
The Annual Report on Monitoring the Application of EU Law sets out how the Commission monitored and enforced EU law in 2019, and the performance of Member States in various policy areas.
EBA And ESMA Launch Consultation to Revise Joint Guidelines For Assessing The Suitability of Members of The Management Body And Key Function Holders04/08/2020 09:25:00
The European Banking Authority (EBA) and the European Supervisory Market Authority (ESMA) recently (31 July 2020) launched a public consultation on their revised joint Guidelines.