- The FBI has eliminated Avcheck, a site that provides services for cybercriminals
- Avcheck was used to test malware against AV suppliers without increasing alarms
- Two crypto services were also dismantled.
Avcheck.net, a website that provides analysis services for cybercriminals, has been disconnected as part of an application of the largest law carried out by the FBI, as well as the Dutch and Finnish police.
At the time of publication, the website had been disfigured and showed the usual FBI elimination notice: “This domain has been seized in accordance with an seizure order issued in the United States District Court for the Southern District of Texas as part of a coordinated operation of application of the law.”
The site operated as an antivirus (CAV) counter service (allowing cybercriminal Antivirus suppliers.
Final operation
Matthijs Jaspers, leader of the Dutch high -tech crime team, described the demolition as an “important step” in the fight against cybercrime, “because it interrupts the activities of cybercriminals in the early stages and prevents the victims,” said the press release, published on the Dutch police website.
In the same announcement, it was said that the investigation that led to this demolition also showed “key evidence” to administrators and users not only of Avcheck, but also of related services: Cryptor.biz and Crypt.guru.
These two were ‘critical services’ that criminals used to “crypt” malware, which helped evade detection.
A separate ad, published at the end of May on the Doj site, says the operation was “in the seizure of four domains and its associated server.”
This announcement did not appoint specific services, but it is safe to assume that it was these three.
The demolitions are part of the Endgame Operation, a large -scale international coordinated initiative aimed at dismantling cybercriminal infrastructure, particularly focused on malware and ransomware.
French, German, Ukrainian and Portuguese police also participated in different capacities.
Through Bleepingcomputer