Security News > 2022 > June > Ukraine arrests cybercrime gang operating over 400 phishing sites
The Ukrainian cyberpolice force arrested nine members of a criminal group that operated over 400 phishing websites crafted to appear like legitimate EU portals offering financial assistance to Ukrainians.
The threat actors used forms on the site to steal visitors' payment card data and online banking account credentials and perform fraudulent, unauthorized transactions like moving funds to accounts under their control.
According to the police's estimates, the total damage caused by this cybercrime operation is 100 million hryvnias, or approximately $3,360,000, stolen from roughly 5,000 victimized citizens.
The announcement does not mention how users ended up on the phishing sites, but it could be via spam email, SEO poisoning, direct messages, or scam posts on social media platforms.
Law enforcement was able to track the phishing actors with the help of investigators from the Pechersk Police Department and the assistance of specialists from the National Bank of Ukraine.
Mobile phones, bank cards, and money found during the raids were confiscated.