DoJ Seizure of Huione Cloud Account: Lessons for Cyber Defen

DoJ Seizure of Huione Cloud Account Exposes the Infrastructure Behind Cyber Scam Money Laundering

Law enforcement has struck at the digital backbone of a billion-dollar scam-for-launder ecosystem, seizing the cloud accounts that enabled transnational criminal syndicates to move illicit proceeds. This takedown reveals a dangerous truth: legitimate cloud infrastructure is the new currency of cybercrime finance.

Drokio·June 24, 2026·3 min read

DoJ Seizure of Huione Cloud Account Exposes the Infrastructure Behind Cyber Scam Money Laundering

Based on reporting by The Hacker News →

Introduction

The problem

The U.S. Department of Justice (DoJ) announced the seizure of a cloud computing account that was being used by subsidiaries of the Cambodia-based HuiOne Group, according to reporting from The Hacker News. The account, hosted by a major cloud provider, was operationalized to facilitate the transfer of proceeds from cyber scams and other fraudulent activities. Simultaneously, the U.S. Treasury Department imposed new sanctions on nine individuals and 26 entities linked to Prince Group, a corporate conglomerate connected to HuiOne. The seized account enabled syndicates to process, layer, and launder stolen funds through cloud-based services, effectively industrializing the money-movement phase of cyber-enabled financial crime.

Consequences

This case demonstrates that cyber scams—from romance fraud to investment schemes and business email compromise—have evolved into a full supply chain. The laundering infrastructure is as critical as the phishing email that starts the chain. When criminal groups control cloud accounts and payment rails, they can automate the movement of stolen assets across jurisdictions, making recovery nearly impossible for victims. For enterprises and shopping platforms, the risk is not just direct theft; it is that your legitimate payment integrations or cloud-hosted customer data may be repurposed as a drop point in this laundering network. The reputational and regulatory fallout for any company whose infrastructure is unknowingly co-opted can be severe.

DoJ Seizure of Huione Cloud Account Exposes the Infrastructure Behind Cyber Scam Money Laundering

Introduction

The problem

Consequences

Causes

Technical analysis

How to defend

How Drokio helps

Cloud Immunity