Ukraine: The cyber police arrested a group of phishing actors who managed to steal payment card data from at least 70,000 individuals after luring them to fake mobile service renewal websites.
See also: Xenomorph Android malware: Targets customers of 56 banks
According to the announcement of the prosecutorial authorities, the hackers used the stolen data to empty the victims' bank accounts.
Five people were arrested because they carried out a well‑organized phishing operation that relied on marketing and advertising services to increase visibility on search engines and social media platforms.
This was possible because online platforms lack a thorough vetting process for their customers and the products they promote, leaving fraudsters with room for abuse. Furthermore, users tend to trust these ads.
The phishing operation was supported by 40 fake websites, all hosted on the group's infrastructure, while the servers were managed by another member who performed this administrator role.
See also: Crypto dating scams: A combination of romance and crypto scams targeting dating app users
Finally, the team leader coordinated three individuals who laundered the dirty money. In total, the police estimate a financial loss of 5 million hryvnias (153,000 euros).
Police raided the residences of the five suspects in Ukraine and seized 2 million in cash, mobile phones, flash drives, bank cards and computers.
The arrested persons now face criminal prosecution under Part 2 of Art. 361 (Unauthorized interference with the work of computers, automated systems, computer networks or telecommunications networks) and Part 3 of Art. 190 (Fraud) of the Criminal Code of Ukraine. These violations in Ukraine are punishable by up to 8 years in prison.
See also: Expeditors: Halts global operations due to cyberattack
For those who may have entered their card details on phishing websites, the arrests do not mean that their information is now safe, as threat actors may have shared them with other cybercriminals.
If you suspect you have been a victim of phishing, call your bank to cancel your card.
Information source: bleepingcomputer.com
