Cybercriminals who visited popeyetools.to recently to purchase stolen information and other illicit tools found a nasty surprise instead — the website had been seized by the United States Justice Department. And to really drive the point home, the single splash page also features an image of Popeye behind a set of iron bars.
According to The Record, PopeyeTools has been selling stolen credit card data since at least 2016. Users could also purchase debit card numbers, banking information, and other valuable personal information that could be used to commit identity theft. Stolen access devices and other tools for financial crimes were also available, often at bargain prices.
The sophisticated criminal marketplace fashioned itself as a high-quality resource for discerning cyberthiefs, and even deployed the phrase "Quality, not quantity" to attract clientele. PopeyeTools even guaranteed its products, promising refunds for stolen credit card data that was not valid at the time it was sold.
The Justice Department identified three men — two from Pakistan and one from Afghanistan — as the perpetrators, though it's unclear where the men are currently located or if they have been arrested. All have been charged with several offenses in U.S. federal court and face up to 10 years in prison if they are convicted. The Justice Department has also seized a cryptocurrency account controlled by one of the suspects, worth approximately $283,000.