Sunday, October 18, 2026

Notorious Ransomware Gang Arrested in Ukraine With The Support of EUROPOL

A ransomware gang has been arrested recently in Ukraine, the gang has two members and both of them were arrested.

This was a joint international law enforcement operation that was conducted by several law enforcement agencies with the coordination of Europol.

The threat actors were arrested on September 28, in Kyiv, Ukraine’s capital. And after that, the officials investigated them and came to know that among two members, one of them was a 25-year-old deemed to be a significant member of a large ransomware operation.

Results of the action day

On completion of the investigation, the law officials have summoned the results of the action day, and here are the outputs mentioned below:-

  • 2 arrests and 7 property hunts
  • The capture of US$ 375 000 in cash
  • Seizure of two indulgence vehicles worth €217 000
  • Asset freezing of $1.3 million in cryptocurrencies

Law enforcement agencies involved

As we said above that this arrest was a joint operation, by many law enforcement body, so, that’s why we have mentioned the law enforcement agencies those who took part in this joint law enforcement operation:-

  • France: National Cybercrime Centre of the National Gendarmerie (C3N)
  • Ukraine: Cyber Police Department of the National Police of Ukraine
  • United States: Atlanta Field Office of the Federal Bureau of Investigation
  • Europol: European Cybercrime Centre (EC3)
  • INTERPOL: Cyber Fusion Centre

These threat actors were being suspected of committing a string of targeted attacks on April 2020, against very large industrial groups in Europe and North America.

Apart from this, it was being also noted that the two suspects are members of the REvil ransomware gang. However, the whole operation was being carried out in the framework of the European Multidisciplinary Platform Against Criminal Threats, and not only this but Europol has fully supported the investigation and tried to bring together all the affected countries to establish a joint strategy.

Also Read: Ransomware Attack Response and Mitigation Checklist

You can follow us on Linkedin, Twitter, Facebook for daily Cybersecurity, and hacking news updates.

Balaji
Balaji
BALAJI is an Ex-Security Researcher (Threat Research Labs) at Comodo Cybersecurity. Editor-in-Chief & Co-Founder - Cyber Security News & GBHackers On Security.

Hot this week

How To Access Dark Web Anonymously and know its Secretive and Mysterious Activities

What is Deep Web The deep web, invisible web, or...

How to Build and Run a Security Operations Center (SOC Guide) – 2023

Today’s Cyber security operations center (CSOC) should have everything...

Russian Hackers Bypass EDR to Deliver a Weaponized TeamViewer Component

TeamViewer's popularity and remote access capabilities make it an...

Web Server Penetration Testing Checklist – 2026

Web server pentesting is performed under three significant categories: identity,...

ATM Penetration Testing – Advanced Testing Methods to Find The Vulnerabilities

ATM Penetration testing, Hackers have found different approaches to...

Hackers Use ConnectWise SkyKick Credentials to Access Microsoft 365, Halting Cloud Backups

Attackers abused compromised ConnectWise Cloud Backup credentials to access...

Anthropic’s Claude AI Uncovers Origins of NSA-Provided Cryptographic Keys After 25 Years

Anthropic says an internal Claude research model reconstructed how...

OpenBSD Kernel Flaw Dating Back 37 Years Enables Local Privilege Escalation to Root

A newly disclosed OpenBSD kernel exploitation chain combines a...

GhostAction Hackers Hide Credential-Stealing Malware in Fake Font Files Across 94 GitHub Repositories

GhostAction attackers have expanded their GitHub credential theft campaign...

SideCopy Hackers Target Indian Organizations With ReverseRAT Malware to Steal Data

Indian authorities have warned that SideCopy hackers are targeting...

New GhostBat Android Malware Targets 60 Banking and UPI Apps to Steal PINs

A new GhostBat RAT variant targets 60 Android financial...

New ROMULUS Malware Platform Uses Six Servers to Deliver Multiple Malicious Payloads

ROMULUS, a shared ClickFix delivery platform operating across six...

Related Articles

Recent News