As a result of an international special operation, the Office of the Prosecutor General of Ukraine has stopped the activity of one of the world’s largest phishing services for attacks on financial institutions in different countries.
The Prosecutor’s Office said that as a result of the work of the phishing center, banks in 11 countries – Australia, Spain, the United States, Italy, Chile, the Netherlands, Mexico, France, Switzerland, Germany and the United Kingdom – were affected. According to preliminary data, the losses reach tens of millions of dollars.
It is reported that a hacker from Ternopil developed a phishing package and a special administrative panel aimed at the web resources of banks and their clients.
“The admin panel allowed to control the accounts of users who registered on compromised resources and entered their payment data, which were later received by the fraudsters. He created his own online store on the DarkNet network to demonstrate the functionality and sell his developments,” the Prosecutor’s Office explained the algorithm of the center’s functioning.
More than 200 active buyers of malicious software were found.
According to the investigation, the hacker did not only sell their products but also provide technical support in the implementation of phishing attacks.
“According to the results of the analysis of foreign law enforcement agencies, more than 50% of all phishing attacks in 2019 in Australia were carried out with the help of the development of the Ternopil hacker,” said the Department.
A criminal case has been opened on this fact under the article on unauthorized interference in the operation of computers, automated systems, computer networks, or telecommunications networks, as well as the creation of harmful software products for the purpose of using, distributing, or selling them.
Earlier, the deputy director of the National Coordination Center for Computer Incidents (NCCI), Nikolai Murashov, said that the United States had placed hackers in Montenegro and Ukraine. This was done allegedly under the pretext of protecting the elections.
You may be interested in...
If you like the site, please consider joining the telegram channel or supporting us on Patreon using the button below.