{"id":7241,"date":"2022-04-08T17:28:51","date_gmt":"2022-04-08T17:28:51","guid":{"rendered":"https:\/\/gridinsoft.com\/blogs\/?p=7241"},"modified":"2022-10-15T19:32:13","modified_gmt":"2022-10-15T19:32:13","slug":"assassinations-site","status":"publish","type":"post","link":"https:\/\/gridinsoft.com\/blogs\/assassinations-site\/","title":{"rendered":"Fraudsters arrested for years running fake site to order assassinations"},"content":{"rendered":"<h4>Romanian police have arrested five men behind the dark web&#8217;s most notorious assassinations sites: Besa Mafia, Camorra Hitman, and, more recently, Hitman Marketplace #1.<\/h4>\n<p>The resource was fake, and the site administrators did not know any killers, but this did not stop them from taking from 5,000 to 20,000 dollars in bitcoins to search for performers.<\/p>\n<p>The site was created in the 2010s and allegedly offered visitors a platform to search for contractors for assassinations. Users were asked to provide details of the target and information on how and when the assassination was to take place and then were asked to pay a \u201ccommission\u201d in bitcoin.<\/p>\n<p><img decoding=\"async\" src=\"https:\/\/gridinsoft.com\/blogs\/wp-content\/uploads\/2022\/04\/Besa-Mafia.jpg\" alt=\"Assassination site\" title=\"\"><\/p>\n<p>From the very beginning, it was clear that the site was most likely a fraudulent one, and yet, over the years of its operation, the administration has accepted thousands of orders and found many paying customers. Husbands ordered the murders of their wives, business partners sought killers for their colleagues, a man who lost money on a sports betting site asked about the murder of a customer service representative who refused to help with a refund, and there was even one who ordered the murder of a 14-year-old teenager.<\/p>\n<p>Many details about <b>Besa Mafia<\/b> <a target=\"_blank\" href=\"https:\/\/xakep.ru\/2016\/05\/13\/besa-mafia\/\" rel=\"noopener noreferrer nofollow\">became known<\/a> back in 2016, when the site was hacked, and information about the users of the site and their orders became public. Let me remind you that at that time, the resource claimed to be connected with the Albanian mafia.<\/p>\n<p>The Romanian Organized Crime and Terrorism Investigation Authority (<b>DIICOT<\/b>) now reports that the raids and arrests <a target=\"_blank\" href=\"https:\/\/diicot.ro\/mass-media\/3498-comunicat-de-presa-3-06-04-2022\" rel=\"noopener nofollow\">were carried out<\/a> at the request of US authorities. The US Department of Homeland Security and the <b>FBI<\/b> have been investigating cases related to this resource for many years. As DIICOT writes:<\/p>\n<div class=\"su-quote su-quote-style-default\"><div class=\"su-quote-inner su-u-clearfix su-u-trim\">The US authorities have determined that this group consists of five or more persons located on the territory of Romania and coordinately operates these sites and launders money received due to incitement to murder.<\/div><\/div>\n<p>As a result, during the operation by law enforcement officers, five people and four witnesses were detained.<\/p>\n<p>Information security expert <b>Christopher Monteiro<\/b>, who studied Besa Mafia activity in detail back in 2016 and devoted a <a target=\"_blank\" href=\"https:\/\/pirate.london\/assassination-scams-the-next-generation-16faccef578e\" rel=\"noopener nofollow\">series of articles<\/a> to it <a target=\"_blank\" href=\"https:\/\/deku-shrub.medium.com\/besa-mafia-murder-for-hire-scam-exposed-following-hack-3e4d6bed3a33?source=user_profile---------57-------------------------------\" rel=\"noopener noreferrer nofollow\">on his blog<\/a>, angered the site administrators so much that they threatened him personally.<\/p>\n<p>Then Monteiro wrote that Besa Mafia is a scam and, to some extent, an urban legend. However, the users of the site took their \u201corders\u201d seriously, they wanted to cause real harm to other people, and the expert tried for a long time to warn the authorities about this danger.<\/p>\n<p>Unfortunately, law enforcement officers took Besa Mafia seriously only in the 2020s. As a result, according to Monteiro, about 25 customers have since been arrested, but the administration of the site has remained elusive until recently.<\/p>\n<p>For many years, the authorities did not know who was behind the Besa Mafia since someone \u201c<b>Yura<\/b>\u201d was responsible for all contacts with users. He talked to people who asked questions about the services of killers, encouraged them to make orders, and tried to dispel all their fears in broken English. Based on the logs of such chats, the authorities assumed that he lived in Eastern Europe (most likely in Romania). At the same time, Yura even <a target=\"_blank\" href=\"https:\/\/www.cbsnews.com\/news\/48-hours-disrupts-alleged-dark-web-hitmen-in-potential-murder-for-hire-plots\/\" rel=\"noopener noreferrer nofollow\">gave interviews<\/a> to journalists, changing his voice, but his identity and whereabouts were not known for certain.<\/p>\n<p>Even now, after all the arrests and searches, it is not clear whether Besa Mafia was the brainchild of one person who developed his &#8220;business&#8221; to such an extent that he needed the support of an entire team or some group was always behind the site.<\/p>\n<p>DIICOT reports that the damage from the work of the Besa Mafia is estimated at about 500,000 euros, but if the scammers kept the bitcoins received in 2016, they would probably be worth much more today.<\/p>\n<p>The aforementioned Christopher Monteiro, who for years tried to draw attention to the Besa Mafia problem, reacted ambiguously to the news about the detention of Yura.<\/p>\n<div class=\"su-quote su-quote-style-default su-quote-has-cite\"><div class=\"su-quote-inner su-u-clearfix su-u-trim\">It\u2019s good that an international law enforcement operation led to the arrest of these criminals, but will they ever begin an active investigation into the thousands of names on the \u201cdeath list\u201d?<span class=\"su-quote-cite\"><a href=\"https:\/\/www.vice.com\/en\/article\/v7d8j3\/the-alleged-scammers-behind-the-most-notorious-murder-for-hire-site-have-been-arrested\" target=\"_blank\" rel=\"nofollow noopener\">the researcher comments on the pages of the <b>Vice Motherboard<\/b>.<\/a><\/span><\/div><\/div>\n<p>The media also note that Besa Mafia already has many imitators. For example, a journalist from Vice Motherboard writes that he easily found a similar site <a href=\"https:\/\/gridinsoft.com\/darknet\">on the darknet<\/a> aimed at a Russian-speaking audience. From there, he was directed to <b>Telegram<\/b>, where he asked how he could find a killer in Los Angeles. The resource owners answered him within a few minutes, saying they could arrange everything quickly and the murder would cost $15,000.<\/p>\n<p>Let me remind you that we also talked about the fact that the <a href=\"\/blogs\/arrest-of-lapsus-group\/\">British police announced the arrest of several members of the <b>Lapsus$<\/b> group<\/a>, and also that the <a href=\"\/blogs\/us-authorities-arrest-kaseya-hacker\/\">US authorities arrested <b>Kaseya<\/b> hacker and attacker associated with <b>REvil<\/b> and <b>GandCrab<\/b><\/a>.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>Romanian police have arrested five men behind the dark web&#8217;s most notorious assassinations sites: Besa Mafia, Camorra Hitman, and, more recently, Hitman Marketplace #1. The resource was fake, and the site administrators did not know any killers, but this did not stop them from taking from 5,000 to 20,000 dollars in bitcoins to search for [&hellip;]<\/p>\n","protected":false},"author":3,"featured_media":7249,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"content-type":"","_sitemap_exclude":false,"_sitemap_priority":"","_sitemap_frequency":"","footnotes":""},"categories":[15],"tags":[416,123,354],"class_list":{"0":"post-7241","1":"post","2":"type-post","3":"status-publish","4":"format-standard","5":"has-post-thumbnail","7":"category-security-news","8":"tag-darknet","9":"tag-fbi","10":"tag-vice-motherboard"},"featured_image_src":"https:\/\/gridinsoft.com\/blogs\/wp-content\/uploads\/2022\/04\/assassination-site.jpg","author_info":{"display_name":"Vladimir Krasnogolovy","author_link":"https:\/\/gridinsoft.com\/blogs\/author\/krasnogolovy\/"},"_links":{"self":[{"href":"https:\/\/gridinsoft.com\/blogs\/wp-json\/wp\/v2\/posts\/7241","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/gridinsoft.com\/blogs\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/gridinsoft.com\/blogs\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/gridinsoft.com\/blogs\/wp-json\/wp\/v2\/users\/3"}],"replies":[{"embeddable":true,"href":"https:\/\/gridinsoft.com\/blogs\/wp-json\/wp\/v2\/comments?post=7241"}],"version-history":[{"count":9,"href":"https:\/\/gridinsoft.com\/blogs\/wp-json\/wp\/v2\/posts\/7241\/revisions"}],"predecessor-version":[{"id":11137,"href":"https:\/\/gridinsoft.com\/blogs\/wp-json\/wp\/v2\/posts\/7241\/revisions\/11137"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/gridinsoft.com\/blogs\/wp-json\/wp\/v2\/media\/7249"}],"wp:attachment":[{"href":"https:\/\/gridinsoft.com\/blogs\/wp-json\/wp\/v2\/media?parent=7241"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/gridinsoft.com\/blogs\/wp-json\/wp\/v2\/categories?post=7241"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/gridinsoft.com\/blogs\/wp-json\/wp\/v2\/tags?post=7241"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}