DOJ Seizes HuiOne-Linked Cloud Account as Treasury Sanctions Prince Group Network
Summary
The DOJ seized a cloud account used by HuiOne Group subsidiaries, including the operator of a Telegram-based criminal marketplace. Treasury announced sanctions against nine individuals and 26 entities linked to Prince Group.
Key points
- The DOJ said it seized a cloud computing account used by HuiOne Group subsidiaries, which it alleged helped move cryptocurrency scam proceeds into the banking system.
- According to the DOJ, the account hosted backend infrastructure for HuiOne Guarantee, a Telegram marketplace that facilitated transactions involving crimeware and laundering services.
- The marketplace offered data, phishing and fraudulent-investment website services, and tools for face swapping, voice cloning, and deepfake impersonation.
- Treasury announced sanctions against nine individuals and 26 entities linked to Prince Group.
- FinCEN assessed H-Pay Service PLC as a primary money laundering concern, citing efforts to circumvent restrictions on HuiOne Group.
- Flare reported that more than 30 marketplaces emerged after HuiOne Guarantee ceased operations, with activity shifting to successor markets and alternative messaging platforms.
Article Details
- Event Type
- U.S. law enforcement seizure of a cloud computing account used by HuiOne Group subsidiaries, alongside Treasury sanctions targeting Prince Group-linked individuals and entities and FinCEN action against H-Pay Service PLC.
- Impact
- The seized account hosted backend infrastructure for HuiOne subsidiaries, including HuiOne Guarantee, which operated an illicit Telegram marketplace offering crimeware, laundering services, stolen data, and services used in scams. The Department of Justice said the subsidiaries allegedly helped move and convert proceeds from cryptocurrency frauds and cyber scams. Elliptic reported that HuiOne had received more than $31 billion in cryptoasset transactions before going offline. Treasury sanctioned nine individuals and 26 entities linked to Prince Group; FinCEN assessed H-Pay Service PLC as a primary money laundering concern.
MITRE ATT&CK
People
Threat Actors
Huione GroupThe Department of Justice said its subsidiaries allegedly helped transfer proceeds from cryptocurrency frauds, cyber scams, and other criminal activity; the group used the seized account as technological infrastructure for those activities.HuiOne GuaranteeOperated an illicit Telegram marketplace that facilitated transactions involving crimeware and laundering services, according to the article and cited authorities.Prince GroupDescribed by Treasury as a Transnational Criminal Organization involved in a criminal enterprise built on scam compounds, fraud, and money laundering.
Products
Countries
Cambodia(DoJ) on Tuesday announced the seizure of a cloud computing account put to use by subsidiaries of Cambodia-based corporate conglomerate HuiOne Group, as the Treasury unveiled fresh sanctions against nineChinaPrince Group’s chairman, Chen Zhi has since been arrested, extradited to China, and stripped of his Cambodian citizenship.United StatesIn tandem, the U.S.