Endpoint //

Authentication

3/16/2018
03:09 PM
50%
50%

Phantom Secure 'Uncrackable Phone' Execs Indicted for RICO Crimes

Executives of Phantom Secure have been indicted on federal RICO charges for encrypting communications among criminals.

"Lie down with dogs, wake up with fleas," the old aphorism goes. "Encrypt for drug traffickers, wake up with indictments," is the version that Phantom Secure might render today. In a series of indictments, a federal grand jury said the CEO and four associates, "... knowingly and intentionally participated in a criminal enterprise that facilitated the transnational importation and distribution of narcotics through the sale and service of encrypted communications."

According to the FBI, Phantom Secure earned more than $80 million in the last decade providing secure communications for over 20,000 users, all of whom were active in various criminal undertakings. In their product offerings, Phantom Secure took standard smart phones, removed all "civilian" functionality, and replaced it with encrypted email systems that the phones could only use for communicating within the Phantom Secure network of devices.

In a statement, the FBI says, "Given the limited functionality of the phones and the fact that they only operate within a closed network of criminals, all of Phantom Secure's customers are believed to be involved in serious criminal activity." The FBI worked with Australian Federal Police, Royal Canadian Mounted Police, and law enforcement agencies in Panama, Hong Kong, and Thailand to pursue and arrest CEO Vincent Ramos in Bellingham, Wash. The other four Phantom Secure executives named in the indictments are still at large.

In statements, FBI director Christopher Wray said, "'The indictment of Vincent Ramos and his associates is a milestone against transnational crime," while US Attorney Adam Braverman said, "When criminals go dark, and law enforcement cannot monitor their phones or access evidence, crimes cannot be solved, criminals cannot be stopped and lives can be lost. As a result of this groundbreaking prosecution, we will disable the communication infrastructure provided by a criminal enterprise to drug traffickers and other violent criminals."

Ramos will face charges in federal court in San Diego. He and his associates have been charged with Conspiracy to Commit RICO in violation of 18 U.S.C. § 1962 and Conspiracy to Aid and Abet the Distribution of Controlled Substances in violation of 21 U.S.C.  § 841 and 846.

For more, read here and here.

Dark Reading's Quick Hits delivers a brief synopsis and summary of the significance of breaking news events. For more information from the original source of the news item, please follow the link provided in this article. View Full Bio

Comment  | 
Print  | 
More Insights
Comments
Newest First  |  Oldest First  |  Threaded View
Election Websites, Back-End Systems Most at Risk of Cyberattack in Midterms
Kelly Jackson Higgins, Executive Editor at Dark Reading,  8/14/2018
Intel Reveals New Spectre-Like Vulnerability
Curtis Franklin Jr., Senior Editor at Dark Reading,  8/15/2018
Data Privacy Careers Are Helping to Close the IT Gender Gap
Dana Simberkoff, Chief Compliance and Risk Management Officer, AvePoint, Inc,  8/20/2018
Register for Dark Reading Newsletters
White Papers
Video
Cartoon
Current Issue
Flash Poll
New Best Practices for Secure App Development
New Best Practices for Secure App Development
The transition from DevOps to SecDevOps is combining with the move toward cloud computing to create new challenges - and new opportunities - for the information security team. Download this report, to learn about the new best practices for secure application development.
Twitter Feed
Dark Reading - Bug Report
Bug Report
Enterprise Vulnerabilities
From DHS/US-CERT's National Vulnerability Database
CVE-2018-1394
PUBLISHED: 2018-08-20
Multiple IBM Rational products are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 138425.
CVE-2018-1517
PUBLISHED: 2018-08-20
A flaw in the java.math component in IBM SDK, Java Technology Edition 6.0, 7.0, and 8.0 may allow an attacker to inflict a denial-of-service attack with specially crafted String data. IBM X-Force ID: 141681.
CVE-2018-1656
PUBLISHED: 2018-08-20
The IBM Java Runtime Environment's Diagnostic Tooling Framework for Java (DTFJ) (IBM SDK, Java Technology Edition 6.0 , 7.0, and 8.0) does not protect against path traversal attacks when extracting compressed dump files. IBM X-Force ID: 144882.
CVE-2015-5160
PUBLISHED: 2018-08-20
libvirt before 2.2 includes Ceph credentials on the qemu command line when using RADOS Block Device (aka RBD), which allows local users to obtain sensitive information via a process listing.
CVE-2015-5243
PUBLISHED: 2018-08-20
phpWhois allows remote attackers to execute arbitrary code via a crafted whois record.