Investigation with UNODC reveals vast criminal infrastructure linking illegal gambling, cyber fraud, and organized crime under “Vault Viper.”
Infoblox Threat Intelligence (ITI), in collaboration with the United Nations Office on Drugs and Crime (UNODC), has released groundbreaking research exposing a powerful nexus between one of Asia’s largest iGaming providers, BBIN (Baoying Group), and organized criminal networks operating across Southeast Asia.
The investigation reveals that BBIN, through a complex web of shell companies and affiliated ventures, is linked to cyber-enabled fraud, illegal gambling, and transnational organized crime. At the center of this network lies Vault Viper, the code name used by Infoblox to describe the conglomeration of businesses and criminal operations tied to BBIN — a network valued in the tens of millions of dollars.
“Vault Viper isn’t just a tech problem—it’s a global crime story. By exposing this operation, we aim to help law enforcement, businesses, and everyday users stay one step ahead of the bad actors.”
One of Vault Viper’s most striking tools is the Universe Browser — marketed as a privacy solution for online gamblers but, in reality, a sophisticated surveillance platform capable of credential theft, covert tracking, and remote access.
According to Infoblox’s DNS analysis, Vault Viper controls tens of thousands of domains, forming a unique and extensive DNS fingerprint that allows the group to dominate a self-contained section of the internet. The research also shows that the group maintains control over an autonomous system number (ASN) and multiple large companies, demonstrating the scale and technical sophistication behind its operations.
Even after the Philippines outlawed offshore gambling, Vault Viper-linked entities continue to operate from Cambodia, fueling a persistent underground economy that merges the digital and physical criminal worlds.
This revelation underscores the evolving intersection of cybercrime and organized crime, where illicit online operations increasingly finance and sustain transnational criminal enterprises.
Infoblox’s latest findings aim to assist governments, regulators, and enterprises in strengthening their intelligence capabilities and collaborative defenses against these hybrid threats.
