The cyber police, in cooperation with the National Police (GUNP) of Ukraine, have arrested three hackers accused of hacking and attempting to sell more than 100 million email and Instagram accounts.
The three hackers, aged between 20 and 40, used specialized software to perform a brute-force attack and gain access to the accounts. Brute force attacks involve guessing an account's password through an automated process of trying many possible combinations of usernames and passwords until the correct one is found. The success of this method relies on the available computing power in relation to the length and complexity of the password.
The three arrested were selling access to the compromised accounts to various darknet fraud groups.
See also: LockBit ransomware: Member arrests and decryption tool
The buyers then used this access to send messages to the victims, requesting money transfers.
According to Ukrainian police, the hackers were spread across various regions of Ukraine and had an organized structure, in which the leader distributed work tasks to other members.
Law enforcement authorities conducted seven searches in several cities. During these searches, they arrested the hackers, seized 70 computers and other IT equipment, 14 mobile phones, bank cards and cash.
The three hackers are accused of unauthorized interference with information systems and networks, which is punishable by up to 15 years in prison (according to Ukrainian law).
The police have launched an investigation into the group's possible collaboration with foreign entities. Mainly, the emphasis is on the possible theft of accounts that would serve Russian interests.
See also: Hacker arrested for selling bank accounts on the dark web
The breach and attempted sale of 100 million stolen accounts is a matter of great concern. There is a need for stricter security measures and cooperation between countries to combat such crimes.
Furthermore, there is a need for more education and awareness about cybersecurity so that citizens can better protect their personal data.
To protect your accounts from brute-force attacks, choose strong passwords for all your accounts. A strong password includes a combination of letters, symbols, and numbers. Additionally, don’t use the same passwords for different accounts. If one account, the rest will be compromised too. Finally, it’s recommended that you enable multi-factor authentication (MFA) whenever the option is available. MFA adds another layer of defense that prevents an account from being compromised, even when attackers have the right credentials.
See also: US: Warzone RAT infrastructure seized and members arrested
🔒 Protect your privacy with Proton VPN
Swiss VPN from the creators of Proton Mail — strict no-logs policy, strong encryption, and built-in NetShield that blocks ads, trackers, & malware.
- ✔ No-logs, based in Switzerland (except 14-Eyes)
- ✔ NetShield: blocks ads, trackers & malicious domains
- ✔ Covers all devices — free version available
The link is an affiliate link — SecNews may receive a commission at no additional cost to you. It does not affect the independence of our article writing.
However, the arrest of the hackers from Ukraine is a positive step towards combating cybercrime and strengthening international cooperation in this field.
Source: www.bleepingcomputer.com
