German and Brazilian authorities have made multiple arrests this week in connection with a significant banking hack that occurred in late 2023, resulting in the theft of approximately €30 million ($34.7 million) from German bank accounts. According to the BKA, Germany’s federal police agency, three suspects were apprehended in Europe and charged with fraud, while Brazilian federal police arrested four additional suspects on similar charges as part of Operação Klonen (Operation Clone), which involved executing 21 search and seizure warrants across the country.
Over a span of four days in November 2023, the hackers exploited a vulnerability in a payment provider to make numerous unauthorized withdrawals from the accounts of German online banking users. Brazilian authorities indicated that the operation involved the use of cloned payment cards. The stolen funds were subsequently laundered through networks in Brazil and four European countries.
While neither police agency disclosed the name of the affected bank, Brazilian media reports suggest that it was Germany’s Commerzbank. Reports from late 2023 indicated that Commerzbank had suffered a €30 million hack, although the bank stated at the time that customers would not incur losses. The bank has not yet responded to requests for comment.
The suspects detained in Europe are set to be prosecuted in Spain and Bulgaria, with assistance from Spanish and Bulgarian authorities, as well as the Frankfurt public prosecutor’s office. In Brazil, courts have ordered the seizure of financial assets, vehicles, and real estate valued at over $20 million.
Notably, one individual involved in the investigation was identified as a candidate for elected office in 2024, reportedly using part of the illicitly obtained funds for his campaign. Local media have indicated that he was a city council candidate in Rio de Janeiro. Additionally, Brazilian police seized a 3-D printer used to manufacture weapons during the operation.
Follow Cyber Warriors Middle East for further global cybersecurity developments.
