3 May 2023

Police detective charged with buying stolen credentials via Genesis Market shop


Police detective charged with buying stolen credentials via Genesis Market shop

The US authorities have charged a police officer for using the now-defunct Genesis Market dark web marketplace to purchase stolen account details and other personally identifying information (PII).

According to the US Department of Justice, Terrance Michael Ciszek, 33, a police detective in Buffalo, New York, is accused of buying 11 product “packages” on Genesis Market between March and July in 2020 that included 194 sets of stolen account credentials.

Investigators also found that Ciszek, who allegedly used online moniker ‘DrMonster,’ had bitcoin wallet addresses associated with UniCC, a dark web carding website.

The DoJ’s press release also revealed similar charges against other suspect Corey Robert Dodge (aka Cakesbaylor), 41, Buffalo, New York, who between March 2020 and May 2021 allegedly purchased 14 packages on Genesis Market, that included approximately 8,586 stolen account credentials. The stolen credentials included accounts for Paypal, Tracfone, eBay, Amazon, FedEx, Etsy, Walmart, Chase, Venmo, and eTrade.

Both defendants are facing maximum penalty of 10 years in prison and a $250,000 fine.

Genesis Market, one of the most significant cyber fraud platforms, was dismantled last month as part of an international law enforcement operation dubbed “Cookie Monster.” Genesis Market was an invitation-only dark web forum that has been around since before 2018. By 2020 the platform became the most popular online store for account credentials for various services, device fingerprints, and cookies. The marketplace was discoverable through regular web search engines. As with most large-scale criminal forums, invite codes were widely available, even being offered on YouTube videos.

Back to the list

Latest Posts

What is Vulnerability Management? A Beginner's Guide

What is Vulnerability Management? A Beginner's Guide

In this article will try to cover basics of vulnerability management process and why it is important to every company.
11 September 2024
Cyber Security Week in Review: September 6, 2024

Cyber Security Week in Review: September 6, 2024

In brief: the US charges Russian GRU hackers for attacks on Ukraine, Apache, Cisco, Zyxel patch high-risk flaws, Google fixes Android zero-day, and more.
6 September 2024
Threat actors using MacroPack Red Team framework to deploy Brute Ratel, Havoc and PhantomCore

Threat actors using MacroPack Red Team framework to deploy Brute Ratel, Havoc and PhantomCore

Some of the documents appeared to be part of legitimate Red Team exercises, while other were intended for malicious purposes.
5 September 2024