Ukrainian cyberpolice dismantled phishing group behind illegal property deregistrations

Ukrainian cyberpolice dismantled phishing group behind illegal property deregistrations

Cyber police officers in the Kyiv region, in collaboration with investigators from the National Police of Ukraine and under the procedural guidance of the Prosecutor General’s Office, have dismantled an organized criminal group that remotely accessed the devices of state enforcement officers and private notaries to illegally remove property restrictions for a fee.

According to law enforcement, four individuals, including a private enforcement officer, orchestrated a scheme to unlawfully lift encumbrances from citizens' movable and immovable property. Their goal was to facilitate illegal property transfers, and they openly advertised these illicit services in online communities.

The group used sophisticated phishing tactics, sending emails disguised as official communications from courts or government agencies. The emails contained malware that, once opened, silently installed itself on the recipient's device. The malware granted remote access and compromised the victim’s digital signature and password.

To avoid detection, the perpetrators carried out their operations in secluded areas, including forested zones in the Kyiv region. Equipped with specialized computer tools and anonymization software, they accessed systems remotely to deregister properties and conduct unauthorized re-registrations.

Authorities have now completed the pre-trial investigation. Charges have been filed against the group’s organizer and three accomplices. Depending on their roles, they face charges under several articles of Ukraine’s Criminal Code, including unauthorized interference with IT systems and the creation and distribution of malicious software.

If convicted, the accused face up to six years in prison.


Back to the list

Latest Posts

China-linked UNC5174 group resurfaces with sophisticated Linux malware campaign

China-linked UNC5174 group resurfaces with sophisticated Linux malware campaign

The campaign leverages a modified variant of the known SNOWLIGHT malware and a new, open-source RAT VShell.
15 April 2025
New ResolverRAT trojan targets global healthcare and pharma sectors

New ResolverRAT trojan targets global healthcare and pharma sectors

The malware combines advanced in-memory execution with layered evasion techniques.
15 April 2025
China accuses NSA of 'advanced' cyberattacks during Asian Winter Games

China accuses NSA of 'advanced' cyberattacks during Asian Winter Games

This is one of the most direct and detailed accusations leveled by Beijing against Washington regarding state-sponsored cyberattacks.
15 April 2025