National Police reported the, that the attackers attacked industrial enterprises in a number of countries using self-developed encryption viruses, after which they demanded a ransom in cryptocurrency. The amount of damage caused by criminal activity, established by the investigation, exceeds 3 billion hryvnias in equivalent. Indictments against a number of other members of the group have been sent to court.
In November 2023, Ukrainian cyber police officers and investigators of the National Police, under the procedural guidance of the Prosecutor General's Office, with the participation of law enforcement officers from the USA, France, Norway, the Netherlands, Germany, as well as representatives of Europol and Eurojust, conducted the first stage of neutralizing an international hacker group, whose members carried out large-scale cyber attacks on companies in France, Norway, Germany, the Netherlands, Canada, and the USA.
The attackers used malicious software they developed, including encryption viruses, for cyberattacks on leading global industrial enterprises. As a result, the data on the victims' computers was encrypted and made unusable. For decryption of the information, the perpetrators demanded millions in payments in cryptocurrency to the controlled wallets of the droppers. The amount of damage caused by criminal activity, established by the investigation, exceeds 3 billion hryvnias in equivalent.
In total, law enforcement officers conducted over 80 authorized searches across Ukraine and seized crypto assets worth over 24 million hryvnias, 9 luxury cars, and 24 land plots with a total area of almost 12 hectares. In order to ensure compensation for the damages caused, the court imposed an arrest on the specified property.
Through the analysis of the information obtained as a result of the investigative actions, it was possible to additionally identify a 33-year-old member of the group who was engaged in searching for vulnerabilities in the corporate networks of the victim companies. The data obtained by the hacker was used by his accomplices to plan and carry out cyberattacks.
The US FBI has placed the person on an international wanted list, charging him in absentia with a number of violations of the United States Code.
Ukrainian law enforcement officers, on behalf of the Prosecutor General's Office, detained a wanted foreign citizen who lived in Kyiv. By decision of the Solomyanskyi District Court of Kyiv, he was placed under extradition arrest. After the extradition check was completed and the extradition decision came into effect, the man was transferred to the American side on June 18, 2025.
