Ukrainian cyberpolice dismantled phishing group behind illegal property deregistrations

Ukrainian cyberpolice dismantled phishing group behind illegal property deregistrations

Cyber police officers in the Kyiv region, in collaboration with investigators from the National Police of Ukraine and under the procedural guidance of the Prosecutor General’s Office, have dismantled an organized criminal group that remotely accessed the devices of state enforcement officers and private notaries to illegally remove property restrictions for a fee.

According to law enforcement, four individuals, including a private enforcement officer, orchestrated a scheme to unlawfully lift encumbrances from citizens' movable and immovable property. Their goal was to facilitate illegal property transfers, and they openly advertised these illicit services in online communities.

The group used sophisticated phishing tactics, sending emails disguised as official communications from courts or government agencies. The emails contained malware that, once opened, silently installed itself on the recipient's device. The malware granted remote access and compromised the victim’s digital signature and password.

To avoid detection, the perpetrators carried out their operations in secluded areas, including forested zones in the Kyiv region. Equipped with specialized computer tools and anonymization software, they accessed systems remotely to deregister properties and conduct unauthorized re-registrations.

Authorities have now completed the pre-trial investigation. Charges have been filed against the group’s organizer and three accomplices. Depending on their roles, they face charges under several articles of Ukraine’s Criminal Code, including unauthorized interference with IT systems and the creation and distribution of malicious software.

If convicted, the accused face up to six years in prison.


Back to the list

Latest Posts

Researchers caught embedding hidden AI prompts to sway research reviewers

Researchers caught embedding hidden AI prompts to sway research reviewers

The investigation analyzed English-language preprints published on the research platform arXiv and found concealed AI instructions in 17 papers.
7 July 2025
Brazilian programmer arrested for role in $185 million bank hack

Brazilian programmer arrested for role in $185 million bank hack

João Nazareno Roque, a junior back-end developer at C&M, was allegedly recruited by hackers in a bar in São Paulo.
7 July 2025
APT36 cyber-espionage campaign targeting Indian defense sector via BOSS Linux

APT36 cyber-espionage campaign targeting Indian defense sector via BOSS Linux

More recently, APT36 has shifted its focus to Linux-based environments.
7 July 2025