Fourth Chamber of the Criminal Division of the National Court, Judge José Luis Calama said:hackers‘ Juan Carlos Ortega Guerrero (Sevilla), known as ‘Alcasec’, with Cartagena resident Daniel Baíllo Escarabajal and Madrid’s José Luis Huertas RubioIt stole the bank information of at least 438,000 Spanish taxpayers, as recorded in separate orders dated November 13 and 29, which El Periódico de España from the Prensa Ibérica group had access to.
The rapporteur of both decisions, Judge Fermín Echarri, stated that the evidence of guilt stated in his decision of 16 October, in which the president of the Central Instruction Court No. 4 recommended the prosecution of the three computer experts, Regarding Baíllo Escarabajal and Ortega Guerrero, “sufficient for the continuation of the trial”. The department has not yet made public its response to the objection made by Alcasec’s lawyer.
In the case of Baíllo Escarabajal, Echarri recalls that he appeared in Calama’s car and was directly linked to the recruitment. The domain “cgpj-pnj.com” used to illegally obtain personally identifiable information to gain access to the computer systems of Basque Country Administration of Justice officials. This domain name, which belongs to a Russian company, was registered through Eranet International Limited, a Hong Kong-based company.
“Russian cyber crimes”
A phone number with a registered Telegram account was used to register the domain.”On two of the main Russian cybercrime forums worldwide: expolit.in and xss.is. These forums specialize in selling access credentials or access to networks of banking institutions,” Echarri explained, refusing to halt the case while waiting for Chinese authorities to provide the necessary information.
Alcasec’s judicial statement also served to prosecute Baíllo Escarabajal; He explained that the idea to attack the Judicial Neutral Point (PNJ) arose after receiving the digital certificate from an official of the General Directorate of Traffic. By creating a fake website called “cgpj-pnj.com” By obtaining the data from the Tax Office, they were able to obtain more identifying information..
This computer scientist living in Cartagena had two software applications installed on his computer, thus controlling an infrastructure consisting of at least three software programs. 16 remote teams, including nine in Russia, three in Germany, two in Spain, one in the UK and one in Ukraine.
Ortega Guerrero
Regarding Ortega Guerrero, Judge Echarri recalls that the instructor stated that he used a virtual identity to purchase the data leaked from the Judicial Neutral Point. Specifically, through the Telegram digital identities ‘Diamante’ and ‘Meliodas’ of the person under investigation, Managed and coordinated “a network of 188 individuals dedicated to cybercriminal activities”It is associated with engaging in different illegal activities with the ultimate aim of economic gain, such as ‘smishing’ (irregular SMS sending).”
Ortega Guerrero’s home was open at the time of his arrest. Tab of ready-to-use bulk SMS sending platform with 24 mobile phones and 114 SIM phone cards. Panels were found in the laptop’s browsing history to obtain credentials using hacking techniques. phishing To customers of 20 Spanish banks.
1.2 million
“As stated, the acquisition of the 30 data packages did not contain harmless information; instead, it contained information that could be classified as reserved for third parties for the purposes at hand, as it was information of a nature that would affect Spanish citizens and also creates a criminal continuum by the acquisition of data after 30 October 2022. Extract from the Judicial Neutral Point (PNJ) to which access is not granted. […] This activity was for profit because wallets In restructured cryptocurrencies, it follows that: moved crypto assets to an amount equal to or greater than 1,237,637 euros“There is no known source of income,” he concludes the order.
Moreover, Echarri stands out in his decision, which reflects the opinion of the Chamber. In 2022 and 2023 Ortega Guerrero purchased different movable and immovable assets valued at over 500,000 eurosAt the same time, various mid- and high-end jewelery and watches, as well as 2,750 euros in cash, were seized from his home.