Insider’s Credential Sale Linked to $140 Million Bank Theft

· 7:26 · Watch on YouTube ↗

Summary

A payment-solutions employee reportedly sold credentials for $920, helping attackers steal $140 million from banks. The video says $30–40 million was laundered through cryptocurrency and notes key incident details remain undisclosed.

Key points

  • The video reports that Zo Nazerino Roku, an employee at a payment-solutions provider serving banks, sold credentials for $920 to help attackers infiltrate banks and steal $140 million.
  • The employee reportedly received another $1,850 after carrying out additional instructions and changed phones every two weeks while avoiding capture.
  • The video says the employee was apprehended in São Paulo, Brazil; it does not provide a reliable arrest date.
  • Zack XBT reportedly said attackers had laundered an estimated $30–40 million through Bitcoin, Ethereum, and Tether using exchanges and over-the-counter platforms in Latin America, and was tracking wallets and assisting law enforcement.
  • The victim company reportedly said there was no vulnerability in its systems and that social engineering and manipulation enabled the infiltration. It said its internal security system detected access and local authorities were notified.
  • The hosts emphasize insider risk, coercion, and promptly removing former employees’ access, while noting that the banks, fund destinations, and details of the company’s response remain undisclosed.

Article Details

Topics
  • [00:52] Insider threats and the reported credential sale
  • [01:12] The reported bank theft and the employee’s role
  • [04:10] Reported cryptocurrency laundering and wallet tracking
  • [05:00] The company’s account of the intrusion and response
  • [06:12] Insider-risk lessons, coercion, and former-employee access

People

Threat Actors