Cyber police have exposed an attacker who helped Russian hackers attack businesses in the Netherlands and Belgium

Tomcat

Professional
Messages
2,376
Reputation
4
Reaction score
406
Points
83
Cyber police and National Police investigators have identified a resident of Kiev who, at the request of members of a Russian hacker group, disguised an encryption virus under the guise of secure files. Russian hackers used a hidden program to interfere with the operation of computer networks of a foreign enterprise. The defendants demanded to pay a ransom for decrypting the data.

Cyber police operatives, together with investigators from the Main Investigation Department of the National Police, under the procedural guidance of the Prosecutor General's Office, identified a 28-year-old native of Kharkiv region who collaborated with a Russian hacker group for a fee.

The police found out that the young man specialized in the development of cryptors (from the English crypt - cache) - special software for masking computer viruses under the guise of secure files. Thanks to his programming skills, the person involved could hide malicious software from the most popular antivirus programs.

So, one of the Russian hacker groups used the services of a resident of Kiev for a reward in cryptocurrency to mask the Conti-malware encryption virus. And at the end of 2021, members of the group infected the computer networks of enterprises in the Netherlands and Belgium with hidden malicious software. As a result of these actions, they became unusable. Hackers demanded to pay a ransom for decrypting computers.

During the investigation, the cyber police established the involvement of the attacker in the Russian hacker groups "LockBit"and "Conti". They specialize in blocking the operation of industrial enterprises by encrypting computer networks in order to obtain ransom.

As part of the pre-trial investigation, police officers together with patrol officers of the special unit "TacTeam" of the TOP PPP battalion conducted a search in Kiev. Also, at the international request of the law enforcement agencies of the Netherlands, a search was conducted on the territory of the Kharkiv region. Computer equipment, mobile phones and draft records were seized.

The investigation continues, and the issue of declaring a suspect under Part 5 of Article 361 (Unauthorized interference in the operation of information (automated), electronic communication, information and communication systems, electronic communication networks) of the Criminal Code of Ukraine is being resolved. The sanction of the article provides for up to 15 years of imprisonment.

Additional legal qualifications are possible.

• Video:
 
Top