The Cyber Department of Ukraine’s Security Service (SSU) has busted a gang that stole the accounts of around 30 million people.
The Cyber Department of Ukraine’s Security Service (SSU) has arrested a group of hackers who are behind the theft of around 30 million people. The gang offered the stolen accounts for sale on the dark web, according to the SSU, they earned almost 14 million UAH from the sale.
They received money through electronic payment systems YuMoney, Qiwi and WebMoney, which are prohibited in Ukraine.
Cybercriminals harvested credentials and sensitive data through malware infections, they focused on systems in Ukraine and the European Union.
The gang’s main clients were pro-Kremlin propagandists who used the compromised accounts in disinformation campaigns aimed at destabilizing political competition in Ukraine and other countries.
“Their ‘big clients’ were pro-Kremlin propagandists. They were the ones who used the identification data received from Ukrainian and foreign citizens to spread false “news” from the front and spread panic. The aim of such manipulations was large-scale destabilization in countries. reads SSU’s press release. “It has also been established that hacked accounts were used on behalf of ordinary people to spread misinformation about the socio-political situation in Ukraine and the EU.”
During the searches, the police seized magnetic hard disks containing citizens’ personal data, computer equipment, mobile phones, SIM cards and USB keys containing evidence of illegal activities.
“Currently, the organizer has been informed of the suspicion under Part 1 of Art. 361-2 (unauthorized sale or distribution of information with limited access, which is stored in electronic computing machines (computers), automated systems, computer networks or on carriers of such information) of the Criminal Code of Ukraine, concludes the SSU.
Follow me on Twitter: @securityaffairs and Facebook
(Security cases – hacking, Ukraine)