Police dismantle international cybercrime ring behind €30 million bank fraud

German and Brazilian authorities have dismantled an international cybercrime ring responsible for a €30 million bank fraud targeting a German financial institution, including Commerzbank. The operation, named “Klonen” by Brazilian police, follows a multi-year investigation into a four-day spree where attackers exploited a vulnerability in a transaction-processing system. This vulnerability was reportedly caused by a faulty software update in a payment service provider's booking process.

During the attack, perpetrators triggered numerous unauthorized withdrawals and systematic direct debits. The stolen funds were laundered through a complex network involving pass-through accounts, virtual asset platforms, and companies, with much of the money being moved to Brazil. Investigators noted that one suspect allegedly used stolen funds to finance a political campaign in 2024.

Brazilian police arrested four individuals in cities including Rio de Janeiro, Goiânia, and Guarulhos, while authorities are pursuing additional suspects in Spain and Bulgaria. A Brazilian court has ordered the seizure of assets, including real estate and vehicles, valued at approximately R$106 million (about $20.7 million).