SBU neutralizes hacker group that hacked bank accounts of Ukrainians

The SBU Cyber Department exposed and neutralized a criminal organization that stole money from Ukrainian bank accounts. The criminals set up operations in Kyiv, and 12 people were detained.

Law enforcement officials report that in just one of the criminal episodes, hackers stole more than UAH 10 million from the deposit account of a Kyiv notary. This money belonged to the Deposit Guarantee Fund and was intended to be paid to the affected depositors of liquidated banks.

According to the investigation, the criminals created malicious software that gave them access to the electronic accounts of depositors of one of the Kyiv banks. The accomplices, who worked in various financial institutions in Kyiv, helped to search for potential victims. Through them, the offenders obtained personal data of Kyiv residents who opened deposit accounts with the bank.

The cybercriminals sent a phishing message to the depositor’s email, disguising it as a banking service update. In this way, the criminals obtained the user’s login and password to manage the accounts. They transferred the stolen funds to bank cards issued to fictitious persons.

In addition, during the investigation, SBU officers found hidden drug laboratories at the suspects' residences — the hackers not only hacked bank accounts but also grew cannabis for wholesale. They sold the finished products through their own connections among drug dealers.

During the searches, the SBU seized

• computer equipment, bank cards and SIM cards of mobile operators with evidence of illegal activity;
• a wholesale batch of cannabis worth almost UAH 8 million.

Currently, all detainees were served a notice of suspicion under the following articles of the Criminal Code of Ukraine:

• ч. 1 Art. 255 (creation, management of a criminal community or criminal organization, as well as participation in it);
• ч. 4 of Article 28, Part 3 of Article 361 (unauthorized interference with the operation of information (automated), electronic communication, information and communication systems, electronic communication networks);
• ч. 4 of Art. 28, Part 3 of Art. 190 (fraud);
• ч. 4 Art. 28, Part 3 Art. 307 (illegal production, manufacture, acquisition, storage, transportation, shipment or sale of narcotic drugs, psychotropic substances or their analogues).

The offenders are in custody. They face up to 12 years in prison.

Recently, we told you about Russian hackers who deceive Ukrainians by offering «social assistance». According to the NBU’s Cyber Defense Center, 68% of phishing sites of this type originate from the occupying country.