Cybercrime

Ransomware Group That Targeted Over 50 Companies Dismantled in Ukraine

Ukrainian authorities on Thursday announced arresting several individuals who are allegedly members of a major cybercrime group.

According to the Security Service of Ukraine and the country’s Cyber Police, the arrests are the result of an operation conducted in cooperation with law enforcement agencies in the United Kingdom and the United States.

Eduard Kovacs

January 13, 2022

Ukrainian authorities on Thursday announced arresting several individuals who are allegedly members of a major cybercrime group.

The suspects allegedly carried out ransomware attacks against more than 50 companies in the United States and Europe, and they made over $1 million by encrypting their files and asking for a ransom.

The ransomware, which has not been named, was delivered using spam emails.

The group’s leader is believed to be a 36-year-old man from Kiev. His wife and three acquaintances are also accused of taking part in the operation.

Authorities say the gang not only launched ransomware attacks, but also provided VPN services to other cybercriminals.

In addition, one of the suspects is wanted in the UK for using malware to steal payment card data. The fraudster allegedly used the stolen cards to make illegal online purchases, and then resold the acquired items for a profit.

Ukrainian authorities announced arrests related to several ransomware gangs in the past year.

Advertisement. Scroll to continue reading.

Written By Eduard Kovacs

Eduard Kovacs (@EduardKovacs) is a managing editor at SecurityWeek. He worked as a high school IT teacher for two years before starting a career in journalism as Softpedia’s security news reporter. Eduard holds a bachelor’s degree in industrial informatics and a master’s degree in computer techniques applied in electrical engineering.

Latest News

Click to comment

CIEM Chat: How to Reduce Cloud Identity Risk

March 26, 2024

Join the session as we discuss the challenges and best practices for cybersecurity leaders managing cloud identities.

Virtual Event: Ransomware Resilience & Recovery Summit

April 17, 2024

SecurityWeek’s Ransomware Resilience and Recovery Summit helps businesses to plan, prepare, and recover from a ransomware incident.

You Against the World: The Offenders Dilemma

Foreign attackers have many more toolsets at their disposal, so we need to make sure we’re selective about our modeling, preparation and how we assess and fortify ourselves. (Tom Eston)

Why Intelligence Sharing Is Vital to Building a Robust Collective Cyber Defense Program

With automated, detailed, contextualized threat intelligence, organizations can better anticipate malicious activity and utilize intelligence to speed detection around proven attacks. (Marc Solomon)

Know Your Audience When Speaking to Security Practitioners

How can security practitioners make sense of the vendor landscape and separate those who talk a good game from those who can execute, perform, and solve real problems for enterprises? (Joshua Goldfarb)

Cybersecurity Mesh: Overcoming Data Security Overload

A significant cybersecurity challenge arises from managing the immense volume of data generated by numerous IT security tools, leading organizations into a reactive rather than proactive approach. (Torsten George)

The OODA Loop: The Military Model That Speeds Up Cybersecurity Response

The OODA Loop can be used both by defenders and incident responders for a variety of use cases such as threat assessment, threat monitoring, and threat hunting. (Etay Maor)

Cybercrime

Comodo Forums Hacked via Recently Disclosed vBulletin Vulnerability

A recently disclosed vBulletin vulnerability, which had a zero-day status for roughly two days last week, was exploited in a hacker attack targeting the...

Eduard KovacsOctober 1, 2019