Seven arrested in Madrid and Italy for stealing over 150 high-end mobile phones using computer script
The National Police dismantled a criminal organisation that obtained more than 150 devices without payment through an exploit in online sales software.
Criminal organisation obtained high-end mobile phones by exploiting vulnerability in telecommunications platform
The National Police have arrested seven people and are investigating a further six as alleged members of a criminal organisation that is believed to have obtained more than 150 high-end devices without paying for them. The arrested individuals are being investigated for the offences of membership of a criminal organisation, unlawful computer access, and computer fraud.
The mechanism used by the group consisted of manipulating the source code of a sales application belonging to a telecommunications company using a computer script — a text file containing a list of instructions — to exploit a previously unknown vulnerability. This vulnerability allowed activation of a delivery order for the requested device without payment having been made.
Once the devices were received, they were distributed to various locations throughout the country and subsequently sold for financial gain. The initial damage caused to the telecommunications company is believed to exceed €50,000.
Data of people over 100 years old used without consent
To carry out the procedures associated with the fraud, the organisation used personal information from approximately 50 people without their consent. Those affected included individuals of advanced age, some of whom were over 100 years old, who in some cases had previously had contact with members of the group and had placed their trust in them.
The investigated individuals took advantage of this relationship to obtain their data and documentation, which they used to register telephone lines, open bank accounts, and complete other administrative procedures. In some cases, they even impersonated their identities during video verification processes.
The packages containing the devices were sent to different addresses throughout the country using the data of these third parties, who in some cases appeared as the official recipients of the shipments.
The leader fled to Italy and was arrested an hour after the European warrant was issued
The investigations made it possible to identify all the alleged members of the scheme and to identify its main person responsible. Upon learning that he was being sought, the leader left Spain. He was located and arrested in Italy just one hour after the issuance of the corresponding European Arrest Warrant, thanks to collaboration with the Sirene Office and Cyber Security division of the Polizia di Stato.
During four raids carried out — three in Madrid and one in Italy — officers located numerous official documents belonging to third parties, approximately €13,000 in cash, and a large quantity of electronic devices.
The operation concluded with seven arrests and six investigations for alleged participation in the criminal organisation.
Source: Google News ES — Crime (es)