RCMP in B.C. help dismantle massive cybercrime network in global operation

The federal RCMP announced its Vancouver-based cybercrime unit helped take down over 1,000 malicious servers as part of an international operation targeting cybercrime.

Over a dozen law enforcement and judicial agencies from across Europe, North America and Australia took part in this latest phase of Operation Endgame, according to a news release from the federal RCMP’s Pacific Region on Nov. 13. Since its establishment in 2022, Operation Endgame has become one of the biggest international law enforcement actions against cybercrime.

The operation was led by Europol, co-ordinating the exchange of information across authorities from its Netherlands headquarters. The collaboration allowed the operation to target the tools and systems used by cybercriminals.

Mounties said the operation successfully dismantled a major infostealer, a Remote Access Trojan and a botnet.

Remote Access Trojans can give a hacker full remote access to an infected computer, while infostealers and botnets are software commonly used to steal personal data (like login information or banking details), according to police.

Cybersecurity company Cloudflare says that a computer or device that is part of a botnet could be used to enable cybercrime without its owner’s knowledge. An infected laptop could be sending out spam or even being used in a large-scale cyberattack.

Mounties said an effective cybercrime response goes beyond stopping the criminal. The tools and systems that enable cybercrime must be disabled to better protect citizens.

“Cybercrime knows no borders, and neither does our response.” Supt. Adam MacIntosh said in the news release.

He said Operation Endgame shows that even the most sophisticated cybercrime networks can be brought down when law enforcement groups come together with a shared goal.

More than 100 law enforcement officers from participating countries helped co-ordinate the operation from Europol headquarters.

But the joint effort went beyond law enforcement and justice authorities. Europol said in a press release that over 30 public and private partner groups were involved, with several private cybersecurity companies making significant contributions.

Technological advancements have led to massive changes in the cybersecurity landscape. RCMP Insp. Shaun Foley said the evolution of cybercrime means “police must also adapt by transforming operations.”

The operation searched 11 locations in Germany, Greece and the Netherlands. This led to the seizure of 20 domain names and one arrest for the man alleged to be the main suspect behind VenomRAT, a type of malware program.

Sally Ji is a Kwantlen Polytechnic University practicum student working with Black Press Media.