International crackdown on RAT spyware which takes total control of victims’ PCs
A hacking tool that was able to give full remote control of a victim’s computer to cybercriminals has been taken down as a result of an international law enforcement operation targeting the sellers and users of the Imminent Monitor Remote Access Trojan (IM-RAT).
The investigation, led by the Australian Federal Police (AFP), with international activity coordinated by Eurojust and Europol, resulted in an operation involving numerous judicial and law enforcement agencies in Europe, Colombia and Australia.
Coordinated law enforcement activity has now ended the availiblity of this tool, which was used across 124 countries and sold to more than 14 500 buyers. IM-RAT can no longer be used by those who bought it.
Search warrants were executed in Australia and Belgium in June 2019 against the developer and one employee of IM-RAT. Subsquently, an international week of actions was carried out this November, resulting in the takedown of the Imminent Monitor infrastructure and the arrest at this stage of 13 of the most prolific users of this Remote Access Trojan (RAT). Over 430 devices were seized and forensic analysis of the large number of computers and IT equipment seized continues.
Actions were undertaken this week in the framework of this operation in the following countries: Australia, Colombia, Czechia, the Netherlands, Poland, Spain, Sweden and the United Kingdom.
A powerful computer highjacking tool
This insidious RAT, once installed undetected, gave cybercriminals free rein to the victim’s machine. The hackers were able to disable anti-virus and anti-malware software, carry out commands such as recording keystrokes, steal data and passwords and watch the victims via their webcams. All that could be done without a victim’s knowledge.
This RAT was considered a dangerous threat due to its features, ease of use and low cost. Anyone with the nefarious inclination to spy on victims or steal personal data could do so for as little as US$25.
Victims are believed to be in the tens of thousands, with investigators having already identified evidence of stolen personal details, passwords, private photographs, video footage and data.
Daniela Buruiana, National Member for Romania at Eurojust and Chair of its Cybercrime Team, said: ‘The cybercriminals selling and using the IM-RAT affected the computers of tens of thousands of victims worldwide. We would like to thank all the judicial and law enforcement authorities involved for the excellent results achieved in this operation. These authorities have shown an extremely high level of commitment and legal and technical expertise. Effective cooperation and coordination among all the relevant actors are vital in overcoming the obstacles to investigations due to the global scale and technical sophistication of this type of crime.’
Steven Wilson, Head of Europol’s European Cybercrime Centre (EC3), recently said:
“We now live in a world where, for just US$25, a cybercriminal halfway across the world can, with just a click of the mouse, access your personal details or photographs of loved ones or even spy on you. The global law enforcement cooperation we have seen in this case is integral to tackling criminal groups who develop such tools. It is also important to remember that some basic steps can prevent you falling victim to such spyware: we continue to urge the public to ensure their operating systems and security software are up to date.”
The public and businesses can follow simple steps to help protect themselves from such malware, including:
- Update your software, including anti-virus software;
- Install a good firewall;
- Don’t open suspicious e-mail attachments or URLs – even if they come from people on your contact list; and
- Create strong passwords.
For more advice on how to protect yourself against Remote Access Trojans, check Europol’s crime prevention advice.
Contacting Eurojust: Ton van Lierop, Eurojust spokesman, firstname.lastname@example.org
00 31 70 412 5518, Mobile: 00 31 6 27194773
Contacting Europol: email@example.com, Media Line: +31(0)70 302 5001
For all Eurojust press releases, please see www.eurojust.europa.eu (Press centre)
If you would like to have Eurojust press releases delivered electronically to your inbox, please complete and submit this subscription form.
Latest News from
Capital markets union: Council sets objectives for the deepening of the project06/12/2019 12:15:00
CMU is an EU initiative which aims to deepen and further integrate the capital markets of EU member states. Together with the banking union, the CMU can help boost cross-border capital flows and thereby strengthen the EU economy.
Deepening the EMU: President Centeno's report to the President of the Euro Summit06/12/2019 11:15:00
The President of the Eurogroup, Mario Centeno, has sent a letter to the President of the Euro Summit, Charles Michel, to report on the progress achieved by the Eurogroup on the deepening of the economic and monetary union (EMU).
Leveraging the rail sector for green growth at local and regional level06/12/2019 09:10:00
Local and regional leaders highlight the potential of the rail sector for the EU Green Deal and other key EU policy priorities
Globalisation: how the EU’s trade policy helps to promote human rights05/12/2019 16:10:00
Growing global competition can endanger human rights by for example leading to worker exploitation. The EU uses its trade policy to promote & protect human rights in non-EU countries through preferential trade deals, as well as unilateral trade restrictions.
Malta: MEPs conclude fact-finding visit to assess Caruana Galizia murder inquiry05/12/2019 15:20:00
Following recent developments in the investigation into the murder of Daphne Caruana Galizia in 2017, MEPs visited Malta between 3-4 December to take stock of the situation on the ground.
We need an EU strategy in social and affordable housing, says EESC05/12/2019 14:02:00
The European Economic and Social Committee (EESC) calls for more robust EU housing policies and, at a public conference held in Brussels on 4 December 2019, has asked the EU to adopt urgent common measures in this field: housing policies at European level must make affordable houses available for all Europeans.
Students from 33 countries will take part in a European Youth Summit on Climate in Brussels05/12/2019 13:20:00
Students from 33 different countries will travel to Brussels in March 2020 to take part in a European Youth Summit on Climate. Students will be asked to represent a sector, industry or bloc of countries and negotiate with each other, in order to come up with recommendations for combatting climate change.
8th Euronest Assembly: the future of relations with Eastern partners05/12/2019 12:10:00
Energy security, EU-Eastern relations and geopolitical challenges are set to be among the focus points of the 8th session of the joint parliamentary assembly.
Europe’s state of the environment 202005/12/2019 10:15:00
While European environment & climate policies have helped to improve the environment over recent decades, Europe is not making enough progress and the outlook for the environment in the coming decade is not positive, according to the ‘European environment — state % outlook 2020 (SOER 2020)’ report.