Cyberattacks

Dia in the hackers’ sights; alleged anti-Mafia files on sale on the dark web: ‘222 MB archive’

A seller going by the name “weykofa” claims to have stolen 302 files from the Anti-Mafia Investigation Directorate. The list includes operational dossiers, information on 25 criminal groups and Europol material. However, there is currently no confirmation of the authenticity of the documents

2' min read

Translated by AI
Versione italiana

2' min read

Translated by AI
Versione italiana

A 222-megabyte archive. According to the person who put it up for sale, it is said to contain part of the Anti-Mafia Investigation Directorate’s information resources: operational dossiers, investigation files, information on 25 organised crime groups, reports relating to Europol and even internal material that has never been published.

The advert appeared on the dark web under the name of a seller who goes by the handle ‘weykofa’. On Sunday 8 November, at 6.41 pm, the alleged breach was reposted on X by Dark Web Informer, an account specialising in monitoring underground online markets. However, the same account included a crucial caveat: the claim remains unverified.

Loading...

What might the data allegedly stolen from the DIA contain?

The seller mentions 302 files. If confirmed, the description of the archive reveals the scale of the potential target: intelligence information relating to 25 criminal organisations, operational dossiers and investigative documents, correspondence with European institutions, and material linked to Europol.

The list also includes photographs of operations that have never been published, press releases still under embargo, internal statistics, personnel data and financial documentation.

However, the material made public does not contain a sample of documents that is legible enough to allow for independent verification. This means that it is currently impossible to determine whether the archive actually exists, whether the files are genuine, or whether the seller has pieced together documents already in the public domain to fabricate a false data leak.

Nor does the name used by the alleged perpetrator of the sale provide any useful information at this stage: ‘weykofa’ does not appear to be linked to any previous data leaks in the searches carried out.

No official confirmation of the alleged cyberattack

On the black market, it is common to find both the sale of genuine data and attempts at fraud, as well as the recycling of old databases and the manipulation of public information presented as confidential.

Only a direct analysis of the files, backed up by technical and institutional evidence, would make it possible to distinguish a genuine data breach from a fabricated claim.

Bitcoin and Monero to buy the archive

The alleged seller accepts payments in Bitcoin and Monero, two cryptocurrencies with very different characteristics.

Bitcoin is widely used in illegal online markets, but every transaction is recorded on the public blockchain. This enables investigators and companies specialising in blockchain analysis to track the flow of funds and, in certain circumstances, trace payments.

Loading...

Monero, on the other hand, has been designed to offer a much higher level of anonymity: it makes it extremely difficult to trace the sender, recipient and amount of transactions. It is precisely because of these characteristics that it has been excluded from several regulated exchanges and is particularly popular in digital criminal circles.

Copyright reserved ©
  • Ivan Cimmarustigiornalista

    Luogo: Roma

    Lingue parlate: Italiano, inglese

    Argomenti: Sicurezza, giudiziaria, inchieste, giustizia tributaria

    Premi: Nel 2011 tra i vincitori del Premio Internazionale Antimafia Livatino-Saetta

Loading...

Brand connect

Loading...

Newsletter

Notizie e approfondimenti sugli avvenimenti politici, economici e finanziari.

Iscriviti