Two men have been indicted in the U. S. for allegedly running a darknet marketplace called WWH Club. It sells sensitive personal and financial information.
Alex Khodyrev, 35, from Kazakhstan. Pavel Kublitskii, 37, from Russia. They are charged with conspiracy to commit access device and wire fraud.
From 2014 to 2024, Khodyrev and Kublitskii served as the principal administrators of WWH Club (wwh-club[.]ws) along with various associated sites—wwh-club[.]net and center-club[.]pw—that operated as darknet marketplaces, forums, and training centers to facilitate cybercrime.
The indictment comes from a U. S. FBI investigation that began in July 2020. The FBI found that the WWH Club (wwh-club[.]ws) linked to an IP address owned by DigitalOcean. This led to a federal search warrant being issued to the hosting provider.
According to the U. S. Department of Justice (DoJ), "WWH Club and its sister site members used the marketplaces to buy and sell stolen personal identifying information (PII), credit card and bank account details, and computer passwords, among other sensitive data."
The forums were a hub for discussing effective fraud, cyber attacks, and evading law enforcement.
Additionally, the darknet marketplace provided online courses for both aspiring and active cyber criminals on conducting fraud. Course fees ranged from 10,000 rubles to 60,000 rubles (approximately $110 to $664 as of September 7, 2024), with an extra $200 charge for training materials.
Court documents indicate that undercover FBI agents registered on the site and participated in a training course after paying around $1,000 in bitcoin. The course covered subjects including the sale of sensitive information, DDoS and hacking services, credit card skimmers, and brute-force programs.
"The training was via a chat function on the forum for a class of 50 students. Various instructors provided materials in text format instead of audio lessons," the criminal complaint states. "The training aimed to instruct on using stolen credit card data and PII to make money through fraud.""
As of March 2023, WWH Club reportedly had 353,000 users globally, up from 170,000 in July 2020. Both Khodyrev and Kublitskii are believed to have benefitted from membership fees, tuition, and advertising revenue.
A Flashpoint report last month found that WWH Club still operates despite law enforcement efforts. It noted that "other administrators are trying to distance themselves from Kublitskii and Khodyrev.""
According to the DoJ, Khodyrev and Kublitskii "had been residing in Miami for the past two years while secretly continuing to manage WWH Club and its associated dark web marketplaces, forums, and training programs."
If convicted on all charges, they each face a potential sentence of up to 20 years in federal prison. The indictment also mandates that Khodyrev forfeit his 2023 Mercedes-Benz G63 AMG SUV and Kublitskii's 2020 Cadillac CT5 Sport sedan, which are alleged to have been acquired using profits from their criminal activities.
