{"id":47276,"date":"2025-10-20T09:32:33","date_gmt":"2025-10-20T09:32:33","guid":{"rendered":"https:\/\/daacdigital.com\/?p=47276"},"modified":"2025-10-20T12:08:23","modified_gmt":"2025-10-20T12:08:23","slug":"operation-simcartel-the-business-of-cybercrime-as-a-service","status":"publish","type":"post","link":"https:\/\/daacdigital.com\/en\/operation-simcartel-the-business-of-cybercrime-as-a-service\/","title":{"rendered":"Operation SIMCARTEL: The Business of Cybercrime-as-a-Service"},"content":{"rendered":"

In October 2025, law enforcement agencies from Latvia, Austria, Estonia, and Finland \u2014 coordinated by Europol and Eurojust \u2014 executed Operation SIMCARTEL<\/a><\/b>, dismantling a sophisticated cybercrime-as-a-service network linked to over 3,200 fraud cases and nearly \u20ac4.9 million in confirmed losses.<\/p>\n

Reason: Profitability Through Simple, Accessible Crime<\/b><\/p>\n

The operation showed how cybercrime has evolved into a scalable business model. For an investment of just a few hundred thousand euros, criminals built an infrastructure including 1,200 SIM box devices<\/a><\/b>, 40,000 active SIM cards, five servers, and two central websites for renting phone numbers from over 80 countries. This infrastructure supported the creation of 49 million fake online accounts<\/a><\/b> used in phishing, impersonation, investment scams, extortion, and identity fraud.<\/p>\n

Tools: Industrialized Crime Made Easy<\/b><\/p>\n

At the core were SIM boxes \u2014 telecom devices repurposed to automate sending and receiving SMS messages across thousands of mobile numbers. Through the websites, customers with little to no technical knowledge could rent foreign phone numbers cheaply, gaining the ability to bypass SMS verification and create fake accounts on platforms worldwide. This \u201ccrime-as-a-service\u201d model industrialized cybercrime logistics, lowering the bar for entry and expanding risks globally.<\/span><\/p>\n

Accessible Crime for Sale: A Warning to Businesses<\/b><\/p>\n

This operation proves the myth that \u201cI\u2019m not a target because I\u2019m small or cheap\u201d is dangerously false. Cybercrime-as-a-service platforms make it affordable and easy for anyone to obtain cybercrime capabilities. Criminals focus on low-hanging fruits \u2014 businesses without dedicated cybersecurity measures are the easiest and most lucrative targets.<\/span><\/p>\n

Business Imperatives from SIMCARTEL<\/b><\/p>\n

\u2022 You cannot ignore cybersecurity just because your company is small or perceived as unimportant.
\n\u2022 The availability of ready-made criminal infrastructure means cyber attacks can be bought and deployed by anyone.
\n\u2022 There is no perfect security; even large companies are victims. But every organization must take steps to protect itself.
\n\u2022 Invest in defense layers, incident response, and consult with verified cybersecurity specialists to reduce risk.<\/p>\n

Operation SIMCARTEL is a stark example of how affordable, accessible criminal tools have transformed cybercrime into a business, targeting wherever defenses are weakest. For every business, cybersecurity is now a critical investment, not an optional cost.<\/p>\n<\/div>

Author:<\/strong> Alexey Shulenkov (Head of CyberSec Division, DAAC digital)<\/em><\/p>\n<\/div>

<\/div>
\"\"<\/div><\/a><\/div><\/div>
\"\"<\/div><\/a><\/div><\/div>
\"\"<\/div><\/a><\/div><\/div>
\"\"<\/div><\/a><\/div><\/div><\/div><\/div>
<\/div><\/div>

For more detailed information on our cybersecurity solutions, please visit our dedicated page: Cybersecurity<\/strong><\/a>.<\/p>\n<\/div><\/div><\/div><\/div><\/div>\n","protected":false},"excerpt":{"rendered":"","protected":false},"author":1,"featured_media":47279,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"iawp_total_views":105,"footnotes":""},"categories":[140,139,611],"tags":[545,730,731],"class_list":["post-47276","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-news","category-blog-en","category-blog-cybersecurity","tag-cyber-security","tag-cybercrime","tag-simcartel"],"_links":{"self":[{"href":"https:\/\/daacdigital.com\/en\/wp-json\/wp\/v2\/posts\/47276","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/daacdigital.com\/en\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/daacdigital.com\/en\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/daacdigital.com\/en\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/daacdigital.com\/en\/wp-json\/wp\/v2\/comments?post=47276"}],"version-history":[{"count":17,"href":"https:\/\/daacdigital.com\/en\/wp-json\/wp\/v2\/posts\/47276\/revisions"}],"predecessor-version":[{"id":47358,"href":"https:\/\/daacdigital.com\/en\/wp-json\/wp\/v2\/posts\/47276\/revisions\/47358"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/daacdigital.com\/en\/wp-json\/wp\/v2\/media\/47279"}],"wp:attachment":[{"href":"https:\/\/daacdigital.com\/en\/wp-json\/wp\/v2\/media?parent=47276"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/daacdigital.com\/en\/wp-json\/wp\/v2\/categories?post=47276"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/daacdigital.com\/en\/wp-json\/wp\/v2\/tags?post=47276"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}