Polish police dismantle cybercrime gang accused of impersonation scams, arrest nine suspects

Avatar

Polish police dismantled an international cybercrime group accused of defrauding dozens of victims out of nearly $665,000, authorities said Tuesday.

Nine people were detained in connection with the case. Investigators said the suspects, who ranged in age from 19 to 51 years old, posed as bank employees and law enforcement officers to trick victims into transferring funds to fraudulent accounts. In total, at least 55 people were targeted.

According to police, the group used spoofing software to impersonate phone numbers belonging to banks, prosecutors’ offices and police departments. The stolen funds were later converted into cryptocurrencies.

The alleged scheme began in April 2023, and the police said the group operated across several countries. Most of the suspects are Ukrainian nationals, while others come from Georgia, Moldova and Azerbaijan. Polish authorities previously charged 46 other individuals in connection with the operation.

A court has ordered pre-trial detention for some of the suspects, and three Ukrainian nationals have been banned from entering Poland and some other European countries. The detainees face charges including participation in an organized criminal group, money laundering, and illegally accessing online banking data — offenses that carry penalties of up to 15 years in prison.

Authorities said the investigation is ongoing and may lead to further arrests.

In a separate case, Dutch authorities sentenced a 24-year-old man to 18 months in prison earlier this week for planning phishing attacks and installing hacking tools on his computers.

In France, a Belarusian national was sentenced to five years in prison on Monday for conducting ransomware attacks on French companies. He was arrested in Georgia in 2022 and extradited to France last year.

NewsCybercrime
Get more insights with the

Recorded Future

Intelligence Cloud.

Learn more.

No previous article

No new articles

Daryna Antoniuk

is a reporter for Recorded Future News based in Ukraine. She writes about cybersecurity startups, cyberattacks in Eastern Europe and the state of the cyberwar between Ukraine and Russia. She previously was a tech reporter for Forbes Ukraine. Her work has also been published at Sifted, The Kyiv Independent and The Kyiv Post.

 

Total
0
Shares
Previous Post

The FBI’s Brett Leatherman gives the latest ‘Typhoon’ forecast

Next Post

DarkWatchman cybercrime malware returns on Russian networks

Related Posts

Apache Tomcat Vulnerability Actively Exploited Just 30 Hours After Public Disclosure

A recently disclosed security flaw impacting Apache Tomcat has come under active exploitation in the wild following the release of a public proof-of-concept (PoC) a mere 30 hours after public disclosure. The vulnerability, tracked as CVE-2025-24813, affects the below versions - Apache Tomcat 11.0.0-M1 to 11.0.2 Apache Tomcat 10.1.0-M1 to 10.1.34 Apache Tomcat 9.0.0-M1 to 9.0.98 It
Avatar
Read More

Hackers Exploit Severe PHP Flaw to Deploy Quasar RAT and XMRig Miners

Threat actors are exploiting a severe security flaw in PHP to deliver cryptocurrency miners and remote access trojans (RATs) like Quasar RAT. The vulnerability, assigned the CVE identifier CVE-2024-4577, refers to an argument injection vulnerability in PHP affecting Windows-based systems running in CGI mode that could allow remote attackers to run arbitrary code. Cybersecurity company
Avatar
Read More