Europol and Eurojust, together with other police and judicial authorities around the world, have successfully intervened in an encrypted communication platform that was established to facilitate serious and organised crime perpetrated by dangerous criminal networks operating globally. The platform, called Ghost, was used as a tool to carry out a wide range of criminal activities, such as large-scale drug trafficking, money laundering, extreme violence cases, and other forms of serious and organised crime.

Ghost had gained strength among criminal organisations thanks to its advanced security features. Users could purchase the tool without providing any personal information. The solution used three encryption standards and offered the option to send a message followed by a specific code that would trigger the self-destruction of all messages on the target phone. This enabled criminal networks to communicate securely, evade detection, counter forensic measures, and coordinate their illegal operations across borders.
Thousands of people around the world used this tool, which had its own infrastructure and applications, and was supported by a network of distributors based in several countries. On a global scale, around a thousand messages were exchanged daily through Ghost.
Since the servers were located in France and Iceland, the company owners were in Australia, and the financial assets were in the United States, a global operation was initiated against this telephone service.
The overturning operation involved a series of coordinated raids and technical interventions. In the course of the investigation, 51 suspects – 38 in Australia, 11 in Ireland, one in Canada, and one in Italy – belonging to the Italian mafia organisation Sacra Corona Unita have been arrested.
Further arrests are expected as the investigation advances.
Moreover, several threats to life were prevented and a drug laboratory in Australia was dismantled, along with weapons, other drugs, and more than one million euros in cash seized worldwide.
To facilitate investigations into illegal activities enabled by this communication platform, an Operational Task Force (OTF) was set up at Europol in March 2022, with participation from police authorities in Australia, Canada, France, Ireland, Italy, the Netherlands, Sweden, and the United States.
This working group has been instrumental in mapping the global technical infrastructure and has been successful in guiding it by identifying key providers and users of the platform, tracking its criminal usage, and executing the coordinated effort to shut it down, all under the judicial supervision of the JIT (Joint Investigation Team) countries.
On the basis of law enforcement cooperation, a JIT was set up between the French and US authorities in January 2024 with the support of Eurojust and Europol.
This complex and global operation has been possible thanks to the active cooperation between the countries involved and Europol, which have participated in the various components of the investigative activities, including actions against high-risk criminal organisations and high-value targets, cyber investigations, the analysis of cryptocurrency transactions, the frequent exchange of intelligence through Europol’s secure channels, and dozens of operational meetings organised in various countries.
_____
Aquest apunt en català / Esta entrada en español / Post en français








