11/24/2023 0 Comments Paypal number of accounts growth chart![]() ![]() The photos in Dulce’s driver license and passport used heavily photoshopped faces of real people, perhaps to defeat any future facial recognition checks. ![]() Benjamin’s passport photo was scraped from a Vietnamese photographer’s website. TechCrunch has seen photos of their open and signed passports, utility bills with account numbers and electricity usage, and copies of their Social Security cards bearing their signatures.īut any more than a cursory look and the sellers’ identities fall apart. On paper, Benjamin and Dulce look like regular Americans. It was through this intricate system of fake identities that the stalkerware maker funneled millions of dollars of illicit customer payments into its bank accounts. We’ve also seen their forged government IDs - passports, driver licenses and Social Security cards - and utility bills of about a dozen or so manufactured identities. TechCrunch has seen completed paper applications that the startup used for applying to credit card processors, filled in with the falsified personal information of sellers who do not exist. The data lays bare years of 1Byte’s financial spreadsheets and customer transactions, including the individuals who purchased the stalkerware. The leaked data we’ve seen also reveals the inner workings of 1Byte’s global surveillance ring. TechCrunch used the data to build a free lookup tool to allow anyone to check if their phone was compromised. The files included TheTruthSpy’s master database, containing a record of every compromised device past and present - close to 400,000 victims - up to the day the database was exfiltrated. Last year, TechCrunch was sent a huge cache of files that had been taken from TheTruthSpy’s servers. The scheme exploited weaknesses present in tech and financial system safeguards against fraud, like “know your customer” checks for verifying a person’s identity, which are designed to block organized crime gangs and money launderers from opening fraudulent accounts or moving funds using forged or stolen documents. (Not that the feds would find them, since they claimed to live at phantom addresses.) And the fake sellers would take the heat if the authorities discovered, seized or shuttered the operation. It seemed like the perfect scheme: This stateside expansion allowed the startup to keep its identity a secret while making at least $2 million in customer payments since 2016. Customers also wanted to pay by credit card, but that would require the startup to fill out stacks of applications and paperwork that would have outed the operation.Ī TechCrunch investigation based on hundreds of leaked documents can now reveal how the spyware operation evaded detection, and for so long - details which have not been previously reported.įrom its software house in Vietnam, 1Byte devised a network of fake identities with forged American passports to cash out customer payments into bank accounts they controlled. PayPal’s systems would periodically flag transactions and limit access to the spyware maker’s accounts and funds. Selling spyware is fraught with legal and reputational risks, especially in the United States, where the startup saw growing demand for TheTruthSpy. ![]() But its rising popularity brought new problems. Other than selling the same apps and living close to each other - something that looks like an unlikely coincidence - Benjamin and Dulce share nothing else in common, except one critical thing: The two sellers exist only on paper.įor years, TheTruthSpy brought 1Byte tens of thousands of dollars in monthly PayPal transactions from customers. But the two bring in huge sums of cash by selling access to TheTruthSpy, a collection of Android so-called “stalkerware” surveillance apps, including Copy9 and MxSpy, which have compromised hundreds of thousands of people’s phones around the world.īenjamin and Dulce are among a wider network of Americans selling the phone spyware, whose involvement helps to conceal the company behind their development, a Vietnam-based startup called 1Byte. They look like small business owners making modest incomes working online. Dulce, 42, lives nearby in a gated community lined with streets of terraced houses and grassy lawns in adjoining Fort Worth. He seems to keep to himself and eschews social media. Benjamin, 44, has a place by the park in an up-and-coming area of downtown Dallas, Texas. ![]()
0 Comments
Leave a Reply. |
AuthorWrite something about yourself. No need to be fancy, just an overview. ArchivesCategories |