Ukrainian law enforcement has arrested three members of an organized Ukrainian hacking group accused of hijacking over 100 million email and Instagram accounts from users around the world. The suspects, aged 20 to 40, face up to 15 years in prison.
The hackers used brute-force attacks to guess account passwords through trial-and-error with specialized software rapidly testing credential combinations.
According to Ukrainian law enforcement press-release, Over the course of a year, the group could collect a massive database of over 100 million hijacked social media online accounts from victims globally, according to preliminary information that will be further investigated.
The suspects resided in different regions of Ukraine and communicated online only. The ringleader assigned tasks, with members compiling the stolen account databases to sell on Darkweb.
The Ukrainian law enforcement conducted seven searches at the suspects’ residences across Kyiv, Odesa, Vinnytsia, Ivano-Frankivsk and the Kyiv, Donetsk and Kirovohrad regions. They seized over 70 computers, 14 phones, bankcards, cash including over $3,000 USD, with motions filed to freeze the confiscated assets.
The three suspects have been charged with unauthorized interference with information, electronic communication and information-communication systems under Part 3 of Article 28 and Part 5 of Article 361 of the Ukrainian Criminal Code. Prosecutors are seeking pretrial detention for the accused.
Investigators are also examining potential connections between the group and agents of the Russian government, as some hijacked accounts may have been used for information operations benefiting Russia’s interests.
The investigation remains ongoing, with additional charges possible based on further evidence.
