Attackers “hacked” the networks of well-known companies and sold access to them to other hackers, including the Russian groups “BlackBasta”, “Revil” and “Conti”. Stolen information was used to extort money. Dozens of cases of extortion in the amount of tens of millions of US dollars have been documented.
According to the materials of the international investigation, hackers used specially created spy programs and phishing Internet mailings to penetrate the electronic networks of corporations. Having access to networks made it possible to steal confidential information and demand money for its non-disclosure. In the special operation in 8 countries, more than 30 members of groups were exposed, more than 90 servers were removed and more than 1000 domains were blocked.
During searches in Ukraine, in particular in the Kyiv region and Zaporizhzhia, mobile phones, computer equipment and server equipment with evidence of criminal activities were seized. At the same time, in 8 countries of the EU and North America, law enforcement officers seized more than 90 servers and blocked more than 1,000 domains used by hackers.
Currently, measures are underway to bring to justice all those involved in cybercrimes. The special operation was conducted jointly with the National Police of Ukraine under the leadership of the Office of the Prosecutor General of Ukraine.