Cyber police officers from the General Directorate for Combating Organized Crime (GDBOP) detained two Chinese citizens in Sofia after a large-scale financial fraud. The men are part of the international cybercrime network "Smishing Triads" and were arrested immediately after they purchased 18 smartphones of the latest model with foreign bank details.
The specialized operation was carried out on March 14 in connection with pre-trial proceedings for serious financial crimes. Investigators found that the two foreigners planned to simultaneously purchase several expensive mobile devices from two metropolitan shopping centers. The payments were made from compromised accounts of unsuspecting online banking users.
The perpetrators were detained at the exit of the stores immediately after the purchases were made. During the subsequent personal searches, the uniformed officers found a total of 18 smartphones. Another 5 mobile devices were seized during a search of the hotel room rented by the foreign citizens. The police specify that one of the men is already known to Bulgarian law enforcement agencies for an identical crime.
The investigation categorically connects the detainees to the international organized crime group "Smishing Triads". According to cybersecurity experts, the network operates in over 120 countries and specializes in large-scale phishing campaigns that generate millions of dollars in profit.
The criminal scheme works by sending misleading short text messages (SMS) that imitate legitimate institutions, banks or courier companies. Victims are manipulated into entering their sensitive data into fake websites. Once they gain access to bank cards, hackers use the funds for personal gain, purchase of expensive equipment, trade or racketeering on the Internet.
After the initial detention for 72 hours, the Sofia City Court has accepted the prosecutor's request and imposed the two defendants with the most severe measure of detention "detention in custody". Work on the case continues with the aim of establishing the full extent of the damage caused and possible other accomplices in the country.