Operation Cookie Monster & Genesis Market: An International Cyber Takedown
summary
Genesis Market operates as a credential-and-device‑fingerprint bazaar selling “bots” that bundle stolen usernames, passwords and a victim’s full digital fingerprint; investigators image servers in late 2020 and early 2021 and find ~59,000 users, roughly 1.5–2 million victims and about 80 million credentials; the market ships a Chromium plugin Genesis Security and a custom browser Genesium to emulate victims; an FBI‑led Operation Cookie Monster on April 4–5, 2023 executes 424 law enforcement actions, seizes domains and triggers sanctions, and a novel focus on prosecuting users collapses trust so the market does not resurface.
AI-written summary · about
chapters (11)
- 0:00Operation Cookie Monster intro
- 1:03Genesis Market cyber crime
- 4:16Stolen credentials & fingerprints
- 9:35Victim risk from Genesis
- 12:52FBI’s Genesis investigation
- 19:19Takedown plan overview
- 23:11Prioritizing Genesis users
- 28:17Global takedown execution
- 33:27Post-takedown impact
- 36:05Cybersecurity lessons
- 42:07Conclusion
related talks
41mThe State Of Credential Stuffing And The Future Of Account Takeovers
01h 00mHow I Met Your Data
44mThe evolution of fighting crime. From handcuffs to keyboard.
38mScammers Who Scam Scammers, Hackers Who Hack Hackers: Exploring a Sub-economy on Cybercrime Forums
40mGet Rich or Get Hunted Trying: Uncovering Large Scale Fraud Operations
50mCyber-crime and attacks in the dark side of the web
48mDawn Of The Dead: The Tale Of The Resurrected Domains
27mCatching the Phisherman