Accused 'DarkOverlord' hacker arrested in Serbia

Law enforcement in Serbia said a 38-year-old man was arrested in "international operation conducted by the FBI."

Serbian police announced Wednesday they had arrested a man who is accused of having ties to the hacking syndicate known as “The Dark Overlord.”

Serbia’s Ministry of the Interior, which is responsible for domestic law enforcement, said a 38-year-old man in Belgrade with initials S.S. was arrested in “international operation conducted by the FBI,” a police statement said.

“The aim of the campaign was to uncover a large number of people who, using the name ‘The Dark Overlord’ on the Internet, have been unauthorized access to computer networks and data of at least 50 victims since June 2016 and have been stifling US citizen information and personal data, including data on ownership and intellectual property, health insurance, treatment and others,” Serbian police said.

The group is famous for a noisy two-year cybercrime spree including hacking, extorting and then leaking episodes from the Netflix series “Orange is the New Black,” as well as hacking U.S. school systems and sending death threats to U.S. students.

This is not a shy group. Dark Overlord’s Twitter account features a long list of threats, claims and brags.

https://twitter.com/tdo_hackers/status/915551973314842624

https://twitter.com/tdo_hackers/status/915948739294097409

https://twitter.com/tdo_hackers/status/915551750614130691

The group allegedly took in over $275,000 in extortion payments, mostly through bitcoin.

CyberScoop has reached out to the FBI and will update this story when we have new information.

Government

• FBI officials say AI is bolstering adversaries, emphasizing need to focus on cyber basics, patching

• Feds accuse China of ‘systematic’ distillation of U.S. AI models

• CIA’s Michael Ellis says cyber intelligence is changing how the agency operates

• The G7 tells industry to hurry up and prep for post-quantum encryption

Technology

• European parliament members call for slowdown of Serbia’s EU entry over spyware use

• FCC proposes public scorecard to rate telecoms on anti-robocall efforts

• Pegasus, NoviSpy variant spyware found on devices of Serbian activists

• Wyden seeks upgraded NSA security guidance on commercial VPN use

Threats

• Chinese espionage groups swarm to exploit triple-link chain of zero-days

• Microsoft discloses two actively exploited zero-days among 974 vulnerabilities

• Russian national extradited to US for alleged involvement in bank-account takeover scheme

• Attackers exploit zero-days in consistently besieged SonicWall product

Policy

• Whistleblower says USPS deploying new, ‘untested’ IT systems governing mail-in ballots

• ‘Watershed 250’ test program in Texas looks to private sector for water cybersecurity help

• Former sexual abuse victims say Grok used their images, videos to train deepfake capabilities

• Cyber threats nudge Trump to sign executive order on foreign equipment in U.S. energy infrastructure