Ransomware Operators Behind Many Attacks Arrested in Ukraine

Share post:

Europol has announced the arrest in Ukraine of two men believed to be members of a notorious ransomware gang that extorted victims with ransom demands ranging from 5 to 70 million euros.

The international law enforcement operation was conducted in coordination with the FBI, the French police and the Ukrainian National Police. Authorities conducted seven property searches, seized $375,000 in cash and two luxury vehicles, which cost about $250,000. Furthermore, the authorities also froze $1.3 million worth of crypto that is believed to be ransom payments.

Coordinated statements by Europol and the Ukrainian police describe the suspects as members of a high-level group, but Europol refused to name the group for operational reasons.

Law enforcement agencies attribute almost a hundred cyberattacks to the gang, which has targeted North American and European organizations since April 2020. The gang’s tactics follow the typical network compromise, the use of malware, data exfiltration and, finally, the encryption of the victim’s local files.

The main compromise points were the victim’s VPN tool or emails to employees storing payloads on their computers.

The total damage to the affected organisations is estimated at 150 million dollars.

For more information, you may view the original story from Bleeping Computer.

SUBSCRIBE NOW

Related articles

Cyber Security Today, Week in Review for week ending Friday May 17, 2024

Welcome to Cyber Security Today. This is the Week in Review for the week ending Friday, May 17th,...

Cyber Security Today, May 17, 2024 – Malware hiding in Apache Tomcat servers

Malware hiding in Apache Tomcat servers, new backdoors found, and more Welcome to Cyber Security Today. It's Friday, May...

MIT students exploit blockchain vulnerability to steal 25 million dollars

Two MIT students have been implicated in a highly sophisticated cryptocurrency heist, where they reportedly exploited a vulnerability...

Cyber Security Today, May 15, 2024 – Ebury botnet still exploits Linux servers, Microsoft, SAP and Apple issue security updates

The Ebury botnet continues to exploit Linux servers, Microsoft, SAP and Apple issue security updates, and more. Welcome to...

Become a member

New, Relevant Tech Stories. Our article selection is done by industry professionals. Our writers summarize them to give you the key takeaways