MN Man Bought 2,500 Stolen Logins, Used Them For Fraud, Feds Say

MINNEAPOLIS, MN — A man living in Minnesota bought nearly 2,500 stolen login credentials from a dark web marketplace, using them to make fraudulent financial transactions and selling some on other websites, federal prosecutors say.

In January, a grand jury issued an indictment against Andrew Shenkosky, 29, charging him with three counts of wire fraud, one count of aggravated identity theft, one count of possession of unauthorized access devices, and one count of trafficking in computer access information.

Between February and November 2020, Shenkosky carried out a plan to steal money while living in Minnesota, prosecutors say.

He did this by buying and using stolen account information from Genesis Market, a shady online marketplace that the FBI shut down in April 2023, authorities said.

Genesis Market sold hundreds of thousands of stolen login credentials — phone numbers, email addresses, usernames, and passwords — hacked from victims’ computers around the world, according to the FBI.

Shenkosky used a fraudulently created Coinbase account to buy access to Genesis Market, where he purchased 2,468 stolen login credentials, authorities said.

He then used the stolen data to withdraw money from a victim’s bank account and transfer it to his PayPal, according to investigators.

He also tried to sell some of the stolen account details on a cybercrime forum called Raid Forums, prosecutors said.