This week, the cybercrime activist Sandu Boris Diaconu, a 31-year-old Moldovan national, was sentenced to 42 months in federal prison by U.S. Senior District Judge James Moody, Jr. Diaconu pleaded to the charges of the DOJ on December 1, 2023, for charges related to conspiracy to commit access device and computer fraud, and possession of 15 or more unauthorized access devices.
Diaconu was a key figure behind the E-Root Marketplace, an online platform infamous for its illicit sale of compromised computer credentials, affecting servers of both companies and individuals globally, including in the United States. The marketplace, sophisticated in its operations, allowed buyers to purchase usernames and passwords, enabling unauthorized access to remote computers. This unauthorized access facilitated a range of cybercrimes, from data theft to ransomware attacks.
The E-Root Marketplace, known for its ability to obscure the identities of its users and transactions, also offered services to exchange cryptocurrency, further complicating the tracking of illicit activities.
The scale of E-Root Marketplace’s operations was vast, with over 350,000 credentials listed for sale, impacting victims across various industries worldwide, including a local government agency in Tampa. The repercussions of these sales were severe, with many victims subjected to ransomware attacks and their stolen credentials being used in identity theft and tax fraud schemes.
Diaconu’s arrest in May 2021, as he attempted to leave the UK, marked a pivotal moment in the international effort to dismantle the E-Root Marketplace network. His extradition to the United States on October 13, 2023, underscored the global cooperation in the fight against cybercrime.
