27-year-old George Kavzharadze was sentenced to 40 months in prison for selling accounting data of more than 300,000 users on SlilPP, the largest dark web market for the sale of stolen accounts. The site was shut down in June 2021 as a result of an international operation by law enforcement agencies. (source)
During the investigation, it was revealed that Kavzharadze, also known as Terorpp, TorqoVec, and Plutuss, actively sold financial and personal information on SlilPP from July 2016 to May 2021. He put up for sale over 626,000 stolen account data during this time, leading to fraudulent activities totaling approximately $1.2 million. Cybercriminals used this data to steal funds from victims’ bank accounts.
The US Department of Justice disclosed that Kavzharadze sold about 240,000 accounts on SlilPP in late May 2021, enabling thieves to steal money from accounts in New York, California, Nevada, and Georgia. All transactions for the sale of data were conducted in bitcoins. Kavzharadze transferred over $200,000 in bitcoins from these sales to his accounts, serving as crucial evidence in the case.
In August 2021, Kavzharadze was charged with conspiracy to commit banking and electronic fraud, banking fraud, fraud using access devices, and theft of personal data. He was later extradited to the US and appeared in court in May 2022. In February 2024, nearly two years after the initial charges, Kavzharadze pleaded guilty to involvement in SlilPP and conspiracy to commit banking and electronic fraud.
SlilPP, operational since 2012, was notorious as the largest marketplace for stolen account data. Cybercriminals used the platform to trade account information from bank accounts, online payments, online stores, and various online services.
Before SlilPP was taken down, the site had sold over 80 million accounts from 1,400 different companies, many of which were globally recognized brands.