Law enforcement agencies from various countries recently executed a significant operation that dismantled Ghost, an encrypted messaging service notorious for its use by criminal organizations worldwide. This coordinated effort resulted in 51 arrests and the confiscation of over $1 million in assets. Among those apprehended was the alleged creator and administrator of Ghost, a 32-year-old Australian citizen. The Australian Federal Police (AFP), in collaboration with agencies from Europe, the United States, and Canada, played a pivotal role in this operation, which also led to the shutdown of a drug lab in Australia and the seizure of weapons and narcotics.
According to AFP Deputy Commissioner Ian McCartney, the operation targeted a wide array of criminal elements, including members of Italian organized crime, outlaw motorcycle gangs, and various international crime syndicates. “We allege hundreds of criminals have used Ghost in Australia and overseas to import illicit drugs and order killings,” McCartney stated. The app, designed specifically for criminal use, provided a secure communication platform that allowed users to operate undetected.
Ghost’s Security Features
Ghost was developed nine years ago and was marketed exclusively to criminals. Users accessed the service through modified mobile phones, which were sold by resellers for approximately $1,350. This price included the device, a six-month subscription to the encrypted network, and technical support. The app boasted advanced security features, such as the ability to purchase it without revealing personal information, and employed three encryption standards. Notably, it allowed users to send messages that could self-destruct upon entering a specific code, further enhancing its appeal to criminal networks.
Europol noted that Ghost facilitated secure communications, enabling criminal organizations to evade detection and coordinate illegal activities across borders. Thousands of individuals utilized the platform for various illicit endeavors, including large-scale drug trafficking and money laundering. The AFP reported that approximately 1,000 messages were exchanged daily, with the operation successfully thwarting around 50 threats to kill or harm individuals in Australia.
A Worldwide Criminal Operation
The Ghost operation was characterized by its global reach. While the service was operated from Australia, its servers were located in France and Iceland, with financial assets traced back to the United States. Law enforcement agencies began scrutinizing Ghost in 2022, leading to the establishment of an operational task force that included representatives from multiple countries. This collaboration enabled authorities to map the technical infrastructure of the service and identify key suppliers and users.
During this investigation, the AFP developed a method to infiltrate Ghost. By modifying routine software updates pushed by the administrator, the agency was able to access the content on devices used in Australia. The culmination of this extensive operation took place between September 17 and 18, resulting in the arrest of 38 individuals in Australia, 11 in Ireland, and one each in Canada and Italy. The alleged mastermind, Jay Je Yoon Jung, faces multiple criminal charges that could lead to a lengthy prison sentence.
Fragmented Encrypted Messaging Space
Both Europol and the AFP highlighted that ongoing law enforcement actions against encrypted messaging services used by criminals—such as EncroChat, Sky Global, and Phantom Secure—are prompting a shift in criminal communication strategies. As a result, the landscape of encrypted messaging is becoming increasingly fragmented, with criminals now turning to less-established or custom-built communication tools that offer varying levels of security and anonymity.
This evolution in tactics allows criminal actors to diversify their communication methods, thereby complicating efforts by law enforcement agencies to monitor and intercept illegal activities. As authorities continue to adapt their strategies to tackle these emerging threats, the battle between law enforcement and criminal organizations remains an ongoing challenge.
