Police seize Matrix encrypted chat service after spying on criminals

Police seize Matrix encrypted chat service after spying on criminals

December 3, 2024 at 10:31AM

Operation Passionflower has successfully dismantled MATRIX, an encrypted messaging platform for cybercriminals, following a major investigation across Europe. Authorities seized 40 servers, encrypted phones, and cash, arresting five suspects. Police monitored 2.3 million messages over three months, aiding further investigations into criminal activities linked to the platform.

### Meeting Takeaways from “Operation Passionflower” Overview

1. **Operation Overview**:
– An international law enforcement initiative, codenamed **’Operation Passionflower’**, has successfully shut down **MATRIX**, an encrypted messaging platform exploited by cybercriminals for illegal activities.

2. **MATRIX Clarification**:
– It is important to distinguish that MATRIX (the criminal platform) is **not** the same as the secure, open-source communication protocol that shares the name **Matrix** and is legal for use.

3. **Geographic Scope**:
– The operation spanned several European countries, including **France, the Netherlands, Italy, Lithuania, Spain, and Germany**, and was coordinated by **Europol and Eurojust**.

4. **Discovery Process**:
– Police tracked MATRIX back to the **phone of a shooter** involved in the attempted assassination of journalist **Peter R. de Vries** in July 2021. The investigation revealed the use of MATRIX for criminal coordination.

5. **Joint Investigation Team (JIT)**:
– Authorities monitored **2.3 million messages** in 33 languages over three months, providing vital intelligence for ongoing investigations.

6. **User Base and Financial Aspects**:
– The platform had **40 servers** serving at least **8,000 accounts**, with users purchasing devices and subscriptions ranging from **$1350 to $1700** in cryptocurrency.

7. **Additional Features**:
– Services offered by MATRIX included encrypted video calls, transaction tracking, and anonymous internet browsing.

8. **Law Enforcement Actions**:
– Coordinated raids led to the shutdown of MATRIX’s servers and the arrest of **five suspects** in Spain and France, including the suspected owner, a **52-year-old Lithuanian**.

9. **Seizures**:
– Authorities confiscated:
– **970 encrypted phones**
– **€145,000 ($152,500)** in cash
– **€500,000 ($525,000)** in cryptocurrency
– **Four vehicles**

10. **User Warning**:
– A warning banner on MATRIX’s website indicates users’ communications have been compromised and invites lawful users to contact the authorities for exemption from investigations.

11. **Context of Similar Operations**:
– The closure of MATRIX aligns with past successful law enforcement efforts against similar platforms, underscoring the effectiveness of gathering evidence from monitored communications and seized servers.

12. **Future Investigations**:
– The investigation into the MATRIX platform and its users will continue, as authorities aim to hold accountable those involved in criminal activities.

These takeaways summarize the key points from the meeting regarding the intricate operation against MATRIX and its implications for law enforcement and cybersecurity.

Full Article