Cyber specialists of the Security Service of Ukraine exposed an interregional group of hackers who distributed malicious software. This was reported in the SBU press center.
The operatives of the special service established that the viruses were "mounted" in popular programs, in particular, for the promotion of Instagram pages and applications for smartphones. The virus program code gave attackers access to information stored on computers and mobile devices, including logins and passwords.
According to the preliminary investigation, the defendants in the case posted links for downloading infected programs in the descriptions of various videos and in social network communities.
The operatives determined that one of the hackers worked for a Russian customer who provided access to a secure server in the Russian Federation. The server was used as an infrastructure for the development of viruses and the exchange of technical tasks and ready-made orders. According to preliminary data, the malicious software protected logins and passwords that gave access to financial information. The Russian side paid for the order in bitcoins.
The SBU officers also established that the attackers had previously created and administered a specialized forum, a Telegram channel, and a bot. These resources were used by representatives of the hacker community to buy and sell personal data. In particular, for trading accounts, logs, copies of passports of citizens of Ukraine, passwords for accessing profiles on the Olx site, electronic wallets such as Qiwi and Yandex, video hosting YouTube.
During the search of the places of registration and residence of the hackers, law enforcement officers seized computers and mobile terminals that were used to carry out illegal activities.
After carrying out the necessary examinations and other investigative actions, it is planned to inform the persons involved in the case about the suspicion of committing the relevant crimes.
The pre-trial investigation continues.
