Europol has announced the dismantling of the communications platform Ghost, which was used by criminal gangs. The international operation resulted in the arrest of 51 people in four countries. The Ghost messenger, which used three encryption standards, processed about 1,000 messages daily. Decryption helped prevent up to 50 cases of violence. The operation continued a series of successful hacks of criminal instant messengers, including EncroChat and Sky ECC.
The joint investigation, launched in 2022, brought together law enforcement agencies from nine countries. The result was the arrests of 38 suspects in Australia, 11 in Ireland, one each in Canada and Italy. The Italian detainee belonged to the Sacra Corona Unita, a mafia structure from Apulia. The key figure in the operation was a 32-year-old Australian who directly administered Ghost.
David McLean, Assistant Commissioner of the Australian Federal Police, said: “Ghost has been used by the Italian mafia, bikie gangs, Middle Eastern and Korean crime syndicates to coordinate drug trafficking and contract killings.” The platform made it possible to destroy all messages with a special code, which complicated the work of investigators.
Jean-Philippe Lecouffe, deputy executive director of Europol, noted the fragmentation of the criminal cyberspace: “Criminals now use many small networks.” Ghost, which had a smaller user base compared to EncroChat or Sky ECC, illustrates this trend. Europol predicts further arrests as the investigation progresses.
Operation Ghost is part of a systematic crackdown on encrypted platforms. The EncroChat hack in 2020 led to 6,500 arrests and the seizure of 900 thousand euros. The hack of Sky ECC in 2021 by Belgian, Dutch and French intelligence agencies triggered large-scale raids. The impact of these operations continues to be felt: in October 2024, a Brussels court will hear the case of 120 defendants based on Sky ECC data.
Justin Kelly, Assistant Commissioner of the Irish Police Service, said: “We are making significant progress in overcoming the challenges posed by encrypted communications.” However, experts note that criminal elements quickly adapt, moving to new platforms after each law enforcement success.