3.7 Cybercrime

Cybercrime continues to grow, attracting criminals who exploit new opportunities offered by modern technology. The main threats are ransomware, malware, social engineering, threats against data, denial-of-service attacks, internet threats, information manipulation and interference, and supply chain attacks.

Cyber-enabled crime, such as online investment fraud, online sexual exploitation of children, and the criminal use of encrypted communication platforms, also continues to pose a significant threat to society.

Eurojust’s operational support to cybercrime cases

In 2024, cybercrime remained one of the top five crime areas handled by the Agency. Eurojust dealt with 25% more cybercrime cases in 2024 compared to the previous year, almost half of which were newly opened. Moreover, the Agency supported 50% more JITs in 2024 (including double the number of newly formed JITs compared to 2023), as well as 55% more coordination meetings related to cybercrime cases.

Spain, followed by the Netherlands, Germany and France, was the country most involved in cross-border cybercrime cases at the Agency in 2024. The United Kingdom, followed by the United States and Switzerland, was the third country most frequently involved in such cases.

Eurojust’s cybercrime casework enabled the disruption and/or takedown of malware, ransomware and encrypted communication platforms, and also included cases of online fraud, including investment fraud.

The Agency continued to provide Member States with crucial assistance in cases involving encrypted communication platforms used by criminals to facilitate all types of crime. This resulted in the decryption of messages on the platforms related to criminal activities such as drug trafficking, firearms trafficking and murder.

A recent example involved the takedown of a sophisticated encrypted messaging service, MATRIX, made by criminals for criminals. During the investigation, the Dutch and French authorities, working together as part of a Eurojust-supported JIT, were able to intercept the messaging service and decipher more than 2.3 million messages in 33 languages.

Malware targeting millions of people taken down by international coalition

CRIME: RedLine and Meta (large malware platforms called ‘infostealers’) target millions of victims worldwide by stealing personal data from infected devices. Over 1 200 servers in dozens of countries run the malware. The infostealers then sell the information to other criminals, who use it to steal money and cryptocurrency and carry out follow-on hacking activities.

Action: On 28 October 2024, a global operation to take down the infostealers takes place, supported by Eurojust.

Result: The international coalition of authorities shuts down three servers in the Netherlands, seizes two domains, unseals charges in the United States and takes two people into custody in Belgium.

Eurojust's role: Eurojust coordinates cooperation between authorities from the Netherlands, the United States, Belgium, Portugal, the United Kingdom and Australia. Through Eurojust, authorities are able to quickly exchange information and coordinate actions to take down the infostealers.

Flags of NL, USA, BE, PT, UK, Australia and Eurojust logos

<<

>>

3.7 Cybercrime

Eurojust’s operational support to cybercrime cases

Key events:

Key publications:

Related network/project:

More information: