The Security Service of Ukraine announced the arrests of 12 members of a cybercriminal gang that used malware to steal funds from the bank accounts of Ukrainians.
According to the authorities, the hackers used custom malware to gain access to depositors’ accounts in one of banks in Kyiv. The group worked with several bank employees who helped them to look for potential victims and obtain personal information of Kyiv residents who opened deposit accounts with the bank.
The cyber crooks then sent a phishing email to their victims to obtain their login credentials and gain access to their bank accounts. The stolen money was transferred to accounts controlled by the criminals.
In one instance, the hackers stole over ₴10 million (around $267,000) from a Kyiv notary’s deposit account. The money belonged to the Deposit Guarantee Fund and was intended to be paid to the affected depositors of liquidated banks, the authorities said.
During raids at the suspects’ offices and home the police seized computer equipment, bank cards and SIM cards of mobile operators with evidence of the crimes, as well as a wholesale batch of cannabis worth almost ₴8 million (~$213,000).
The suspects face up to 12 years in prison if convicted.