CASE DOSSIER charged

U.S. v. Rui-Siang Siew (Incognito Market Darknet Extortion)

Docket: 1:24-cr-00305 Court: U.S. District Court for the Southern District of New York Opened: 2024-05-20 Sector: Consumer Privacy, Cryptocurrency

Key Facts

Status

CHARGED

Legal disposition

Loss Amount

$100.0 million

Processed over $100 million in illicit crypto sales and demanded extortion fees up to $20,000 per vendor.

Techniques

Verified mappings

Defendants

Named in charges

Legal Status: CHARGED in U.S. District Court for the Southern District of New York.
Primary Target Sector: Consumer Privacy, Cryptocurrency.
Documented Financial Loss: $100.0 million.
1 verified MITRE ATT&CK techniques substantiated with verbatim court excerpts.

Export structured case data and MITRE ATT&CK Navigator layer:

Download Navigator Layer (JSON) Case Data (JSON)

Case Summary

Owner and operator of Incognito Market who facilitated over $100 million in illicit darknet transactions before orchestrating an exit scam and extorting registered vendors and buyers with doxxing threats.

Procedural & Incident Timeline

2024-05-18 arrest

Siew arrested at JFK International Airport in New York upon arrival from Taiwan.

Named Defendants & Operatives

Defendant	Nationality	Status	Prison Term	Restitution	Notes
Rui-Siang Siew	Taiwan	charged	Pending	None	Operator of Incognito Market arrested at JFK Airport in May 2024.

Substantiated MITRE ATT&CK Techniques

Technique ID	Technique Name & Tactic	Primary Source Evidence Excerpt	Locator	Verification
T1090	Proxy Command and Control	"Operated hidden onion services over the Tor network equipped with automated cryptocurrency escrow mechanisms."	Criminal Complaint ¶ 8, Page 4	reviewed

Cite & Embed This Case Record

Public Domain / CC0

Bluebook Legal Citation:

Cyberattack Case Library, U.S. v. Rui-Siang Siew (Incognito Market Darknet Extortion), No. 1:24-cr-00305 (U.S. District Court for the Southern District of New York 2024), https://cyberattackcaselibrary.pages.dev/cases/us-v-siew-incognito-market/

Embeddable Incident Card (HTML):