Story image

Decrypted: Phantom Secure takedown a 'significant blow' against Australia's organised crime networks

19 Mar 2018

A collaborative effort by Australian, US and Canada law enforcement agencies has busted a Canadian security firm for allegedly providing secure, encrypted communications to the organised crime market.

Phantom Secure offered encrypted messaging and chat services to customers, according to its website.

However, law enforcement agencies say the company has been providing specially-designed devices for the organised crime market – and may have been the first encrypted communication platform available on a wholesale scale in Australia.

The platform was the single largest supplier to Australia’s organised crime market, with approximately 10,000 devices sold in Australia alone.

Criminals were able to use Phantom Secure’s services and devices to conduct unrestricted and secure communications ‘beyond the capability of law enforcement interception’, a press release from the Australian Federal Police says.

“According to court documents, Phantom Secure advertised its products as impervious to decryption, wiretapping or legal third-party records requests. Phantom Secure also guaranteed the destruction of evidence contained within a device if it was compromised, either by an informant or because it fell into the hands of law enforcement,” a statement from the US Department of Justice adds.

Phantom Secure has now been dismantled by a number of law enforcement agencies, who worked together to disable the platform and the secure devices used on it.

Five men, including Phantom Secure CEO Vincent Ramos, were indicted in the United States last week. Other men charged include Kim Augustus Rodd, Younes Nasri, Michael Gamboa, and Christopher Poquiz.

According to the Australian Federal Police, the men are charged with “Knowingly participated in a criminal enterprise that facilitated the transnational importation and distribution of narcotics through the sale and service of encrypted communications”.

The United States Government was also involved in the takedown through the Federal Bureau of Investigation (FBI). This is the first time the US has targeted a company and its principals for aiding and abetting criminal firms.

“The disruption of the Phantom Secure platform has been one of the most significant blows to organised crime in Australia,” comments New South Wales Crime Commission’s executive director of Criminal Investigations Division, Timothy O’Connor.

Using this equipment, criminals have been able to confidently communicate securely and control and direct illicit activity like drug importations, money laundering and associated serious, often violent criminal offending, yet have remained removed from these criminal acts,” adds Australian Federal Police Assistant Commissioner of Organised Crime, Neil Gaughan.

The bust was a joint effort between the Australian Federal Police, the US Federal Bureau of Investigation, the Royal Canadian Mounted Police (RCMP), the Australian Criminal Intelligence Commission, New South Wales Crime Commission, New South Wales Police, Queensland Police, Victoria Police, South Australia Police, the Australian Taxation Office and AUSTRAC.

According to RCMP organised crime assistant commissioner Jim Gresham, the investigation is a prime example of law enforcement agencies coming together from around the world and collaborating.

“We remain committed to investigating and disrupting these illegal activities that adversely affect each of our communities.”

The Australian Federal Police continues to work with the FBI, RMCP and other partners on the case. Further arrests and charges have not been ruled out.

Authorities are also aware of similar platforms, some of which have direct connections to Phantom Secure, which are also under investigation.

SecOps: Clear opportunities for powerful collaboration
If there’s one thing security and IT ops professionals should do this year, the words ‘team up’ should be top priority.
Interview: Culture and cloud - the battle for cybersecurity
ESET CTO Juraj Malcho talks about the importance of culture in a cybersecurity strategy and the challenges and benefits of a world in the cloud.
Enterprise cloud deployments being exploited by cybercriminals
A new report has revealed a concerning number of enterprises still believe security is the responsibility of the cloud service provider.
Ping Identity Platform updated with new CX and IT automation
The new versions improve the user and administrative experience, while also aiming to meet enterprise needs to operate quickly and purposefully.
Venafi and nCipher Security partner on machine identity protection
Cryptographic keys serve as machine identities and are the foundation of enterprise information technology systems.
Machine learning is a tool and the bad guys are using it
KPMG NZ’s CIO and ESET’s CTO spoke at a recent cybersecurity conference about how machine learning and data analytics are not to be feared, but used.
Seagate: Data trends, opportunities, and challenges at the edge
The development of edge technology and the rise of big data have brought many opportunities for data infrastructure companies to the fore.
Popular Android apps track users and violate Google's policies
Google has reportedly taken action against some of the violators.