Ukraine police arrest suspected cybercriminals accused of theft from industrial companies

Avatar

Ukrainian law enforcement has arrested suspected cybercriminals accused of stealing from some of the country’s “leading industrial enterprises.”

According to a cyber police report on Wednesday, the suspects infected employees’ computers  with malicious software to gain remote access to their financial systems and changed their banking details to accounts controlled by the hackers.

The suspects allegedly managed to steal nearly six million Ukrainian hryvnia (about $145,000). The report doesn’t mention which enterprises were attacked.

The police said two members of the criminal gang “could not reach an agreement” on how to distribute the stolen funds and kidnapped their third accomplice to force him to transfer his share of the “earnings.”

Police located the vehicle used by the suspects and detained them while they were on the go. Among the evidence found in the car were the suspects’ wallets, mobile phones, and a blanket covered with red stains that looked like blood.

If found guilty, the alleged cybercriminals could face up to 12 years in prison on charges of kidnapping and extortion. The investigation is still ongoing and additional charges may be brought against the suspects.

News BriefsNewsCybercrime
Get more insights with the

Recorded Future

Intelligence Cloud.

Learn more.

No previous article

No new articles

Daryna Antoniuk

is a reporter for Recorded Future News based in Ukraine. She writes about cybersecurity startups, cyberattacks in Eastern Europe and the state of the cyberwar between Ukraine and Russia. She previously was a tech reporter for Forbes Ukraine. Her work has also been published at Sifted, The Kyiv Independent and The Kyiv Post.

 

Total
0
Shares
Previous Post

Attacks on Israeli orgs ‘more than doubled’ since October 7, cyber researcher says

Next Post

‘GhostEmperor’ returns: Mysterious Chinese hacking group spotted for first time in two years

Related Posts

Cybercriminals Use Webflow to Deceive Users into Sharing Sensitive Login Credentials

Cybersecurity researchers have warned of a spike in phishing pages created using a website builder tool called Webflow, as threat actors continue to abuse legitimate services like Cloudflare and Microsoft Sway to their advantage. "The campaigns target sensitive information from different crypto wallets, including Coinbase, MetaMask, Phantom, Trezor, and Bitbuy, as well as login credentials for
Avatar
Read More

FBI Busts Rydox Marketplace with 7,600 PII Sales, Cryptocurrency Worth $225K Seized

The U.S. Department of Justice (DoJ) on Thursday announced the shutdown of an illicit marketplace called Rydox ("rydox.ru" and "rydox[.]cc") for selling stolen personal information, access devices, and other tools for conducting cybercrime and fraud. In tandem, three Kosovo nationals and administrators of the service, Ardit Kutleshi, Jetmir Kutleshi, and Shpend Sokoli, have been arrested. Ardit
Avatar
Read More

Mirai Variant Murdoc Botnet Exploits AVTECH IP Cameras and Huawei Routers

Cybersecurity researchers have warned of a new large-scale campaign that exploits security flaws in AVTECH IP cameras and Huawei HG532 routers to rope the devices into a Mirai botnet variant dubbed Murdoc Botnet. The ongoing activity "demonstrates enhanced capabilities, exploiting vulnerabilities to compromise devices and establish expansive botnet networks," Qualys security researcher Shilpesh
Avatar
Read More