Ghost haunts criminals who used the platform

AFP Operation Kraken charged the 32-year-old for creating and administering Ghost, a dedicated encrypted communication platform, which the AFP alleges was built solely for the criminal underworld.
About 700 AFP members executed search warrants and provided support during two days of action across four Australian states and territories on September 17-18.
Near-simultaneous police action is being undertaken in Ireland, Italy, Sweden and Canada.
Up to 50 alleged Australian offenders accused of using Ghost are facing serious charges, including significant prison sentences.
More Australian and international arrests are expected over the coming days.
It will be alleged the Australian offenders who used Ghost were trafficking illicit drugs, money laundering, ordering killings or threatening serious violence. In Australia, the AFP prevented about 50 threats to kill/harm.
It is the first time an Australian-based person is accused of being an alleged mastermind and administrator of a global criminal platform, of which the AFP was able to decrypt and read messages.
He was charged with supporting a criminal organisation contrary to section 390.4(1) of the Criminal Code 1995 (Cth), which carries a maximum penalty of three years’ imprisonment; dealing with the suspected proceeds of an indictable offence less than $100,000 contrary to section 400.9(1) of the Criminal Code 1995 (Cth), which carries a maximum penalty of three years’ imprisonment; dealing in identifying information and using it to commit fraud contrary to section 372.1(1) of the Criminal Code 1995 (Cth), which carries a maximum penalty of five years’ imprisonment; obtaining identification information using a carriage service with intent contrary to section 372.1a(3) of the Criminal Code 1995 (Cth), which carries a maximum penalty of five years’ imprisonment; and contravening a requirement in a section 3LA order contrary to section 3LA (6) of the Crimes Act 1914, which carries a maximum penalty of 10 years’ imprisonment.
The AFP-led Criminal Assets Confiscation Taskforce successfully obtained Proceeds of Crime Act 2002 (Cth) Restraining Orders over the suspected criminal assets. Property restrained includes various cryptocurrencies and bank accounts.
It will be alleged the administrator used a network of resellers to offer specialised handsets to criminals across the globe.
The handsets, which were a modified smart phone, were sold for about $2350, which included a six-month subscription to an encrypted network and tech support.
As of September 17, the AFP will allege there were 376 active handsets in Australia.
Ghost was created about nine years ago, however, the opportunity for law enforcement to target the platform arose in 2022.
In 2022, international partners started targeting Ghost and asked the AFP to join an operational taskforce.
Europol established a global taskforce code named OTF NEXT, which was led by the FBI and French Gendarmerie, and includes the AFP, Royal Canadian Mounted Police (RCMP), Swedish Police Authority, Dutch National Police, Irish Garda Síochána and the Italian Central Directorate for Anti-Drug Service. The Icelandic Police have also assisted the OTF.
While the AFP worked within the taskforce, it also established Operation Kraken after developing a covert solution to infiltrate Ghost.
The administrator regularly pushed out software updates, just like the ones needed for normal mobile phones.
But the AFP was able to modify those updates, which basically infected the devices, enabling the AFP to access the content on devices in Australia.
Most of the alleged offenders who used Ghost are in NSW, however Ghost users are also in Victoria, Western Australia, South Australia and the ACT.
Results from Operation Kraken include: 38 arrests; 71 search warrants conducted; Intervening in 50 threats to life/threats to harm; Preventing more than 200kg of illicit drugs from harming the Australian community; and Seizing 25 illicit firearms/weapons.
AFP Deputy Commissioner McCartney said Operation Kraken once again showcased the skill, dedication and capability of the AFP.
“In 2021, AFP Commissioner Reece Kershaw revealed the details of Operation Ironside,’’ Deputy Commissioner McCartney said.
“The lives of many serious criminals dramatically changed when they realised their phone – and those who vouched for it – had betrayed them.
“The Commissioner warned organised crime that the AFP would come for them again – and at scale.
“That time is now.
“Over the past two days, about 700 AFP members have executed and assisted in search warrants across four states to arrest those who have used a dedicated encrypted communications platform named Ghost.
“We allege hundreds of criminals, including Italian Organised Crime, outlaw motorcycle gang members, Middle Eastern Organised Crime and Korean Organised Crime have used Ghost in Australia and overseas to import illicit drugs and order killings.
“I want to acknowledge all the AFP members who have been involved in this operation – from investigators, intelligence members, tech experts and all other support capabilities.
“Taking down dedicated encrypted communication devices takes significant skill.
“But the holy grail is always penetrating criminal platforms to access evidence – and this is where the AFP is world leading.
“And because we could read these messages, the AFP, with state partners, were able to prevent the death or serious injury of 50 individuals in Australia.
“As Ghost haunts criminals who used the platform, the AFP will be ever present to disrupt and target organised crime in Australia and offshore.”