The Ukrainian Cyber Police detained and extradited to the United States a 33-year-old foreign national who was wanted by the FBI for large-scale cyberattacks on industrial enterprises in various countries around the world.
This is reported by Business • Media
International Operation: Investigation Details
The detainee was one of the key members of an international hacker group that specialized in cyberattacks against companies in the USA, Canada, France, Germany, the Netherlands, and Norway. The total amount of damages caused by the hackers exceeded 3 billion UAH, equivalent to approximately $71.7 million.
The criminals created their own malicious software, including ransomware, to infiltrate the computer networks of enterprises, block data, and demand ransom in cryptocurrencies. The funds obtained were directed to wallets controlled by their drops.
“The hackers used their own created malicious software (malware), including ransomware, to gain access to the computer systems of global companies, encrypt their data, and then demand ransom in cryptocurrencies. Payments were directed to drop wallets controlled by the criminals.”
Operational measures were conducted in cooperation with law enforcement agencies from the USA, the European Union, Europol, and Eurojust. Since November 2023, over 80 searches have been carried out in Ukraine. During the investigative actions, crypto assets worth over 24 million UAH (almost $576,000), nine luxury cars, and 24 plots of land totaling nearly 12 hectares were seized. All seized property has been placed under arrest for further compensation of damages to the affected companies.
Search and Extradition of Suspects
During the analysis of the seized materials, investigators identified another member of the hacker group – a cybersecurity specialist who was involved in searching for technical vulnerabilities in the systems of the companies that became victims of the attacks. His information was used by other group members to prepare criminal activities. The FBI announced this individual in international search and filed charges under the US Criminal Code.
The detained foreign national, who resided in Kyiv, was arrested in accordance with a decision by the Solomiansky District Court of Kyiv for the purpose of further extradition. After completing all necessary procedures, he was handed over to US representatives on June 18, 2025.
It is worth noting that the Ukrainian Cyber Police regularly conducts operations to combat crypto-crime. In particular, a Ukrainian was recently detained in Zaporizhzhia on suspicion of hacking and illegal cryptocurrency mining, and a resident of Kyiv region was arrested in Sumy in a case regarding the creation of a fake cryptocurrency exchange.