LIVE · cybersecurity feed
Live wire
U.S. urges critical infrastructure orgs to secure refrigeration systems ASAP after EU supermarket and blood bank attacksCISA Announces Enhanced Reporting Form for Cyber IncidentsCVE-2026-19868 · CISA Flags SonicWall SonicOS MFA Bypass Flaw Amid Reports of Possible ExploitationCVE-2026-119757 · BTCPay Server Insufficiently Protected Credentials Flaw Exploited Upon DisclosureCVE-2026-118066 · LatePoint Improper Authentication Vulnerability Exploited Upon DisclosureCVE-2026-120534 · ACF Extended Advanced Custom Fields PRO Flaw Exploited Upon DisclosureCVE-2026-109884 · Elementor Website Builder Flaw Exploited Same Day As DisclosureCVE-2026-19868 · SonicWall SonicOS SSLVPN Vulnerability Exploited On Day Of DisclosureCVE-2026-103898 · Wpmet wp_social_login_and_register_social_counter Flaw Exploited Upon DisclosureCVE-2026-116512 · weDevs wp_project_manager Flaw Exploited Before CVE Publication
security

Ukraine dismantles crypto scam network that stole €4.3 million

Ukrainian law enforcement, in coordination with German authorities, has dismantled a sophisticated cryptocurrency investment scam network responsible for the theft of over €4.3 million. The operation, which utilized a series of fraudulent call centers, targeted at least 135 victims residing in Germany. Four individuals, including the alleged ringleader and three accomplices, were arrested…

ZeroDay News ·

Source: BleepingComputer

Ukrainian law enforcement, in coordination with German authorities, has dismantled a sophisticated cryptocurrency investment scam network responsible for the theft of over €4.3 million. The operation, which utilized a series of fraudulent call centers, targeted at least 135 victims residing in Germany. Four individuals, including the alleged ringleader and three accomplices, were arrested following a series of raids conducted across the Kyiv, Vinnytsia, Zaporizhzhia, and Ivano-Frankivsk regions during August and September.

The criminal organization employed a methodology commonly referred to as pig butchering or romance baiting. According to the Cyber Police Department of Ukraine, the suspects initiated contact with potential victims through social media platforms, dating websites, and various messaging applications. By establishing rapport and trust through social engineering, the perpetrators convinced targets to invest in cryptocurrency, stocks, and other financial instruments via fraudulent trading platforms controlled by the group.

The investigation confirmed that the suspects actively assisted victims in setting up accounts on legitimate cryptocurrency exchanges to purchase digital assets. Once the assets were acquired, the group directed victims to transfer the funds into wallets under the control of the criminal organization. In some instances, the suspects reportedly escalated their activities by gaining unauthorized access to the victims' personal online banking credentials to facilitate further theft.

Once the funds were successfully diverted, the organization laundered the proceeds through a complex network of bank accounts, cryptocurrency exchanges, and transit wallets. The stolen capital was then converted into various assets and distributed among the members of the criminal ring. Ukrainian authorities have confirmed that the suspects are currently held in pre-trial detention and face potential prison sentences of up to 12 years if convicted on charges related to fraud and the leadership or participation in a criminal organization.

During the raids, law enforcement recovered significant physical and digital evidence. Seized items included over $90,000 in cash, approximately 600,000 Ukrainian Hryvnia, various hardware cryptocurrency wallets, mobile phones, SIM cards, and computer equipment. This evidence is currently being processed by the Main Investigation Department of the National Police of Ukraine to support the ongoing prosecution.

This operation follows a broader trend of Ukrainian authorities intensifying efforts to crack down on illicit call centers. In August, separate enforcement actions led to the closure of 94 fraudulent call centers that were engaged in similar investment scams and unauthorized bank account access attempts. Additionally, European law enforcement dismantled a separate, larger fraud network operating out of Ukraine last December, which had been responsible for stealing more than €10 million from victims across the continent.

The current case highlights the ongoing challenges posed by cross-border digital fraud, where attackers leverage social engineering to bypass traditional financial security measures. While the specific tactics of this group focused on building long-term trust, the underlying mechanism remains consistent with global patterns of investment fraud. The successful apprehension of the four suspects marks a significant disruption to the network's ability to target European residents.

ShareXLinkedInWhatsAppFacebook

More News

view all →
vulnerability

Anthropic Rolls Out Mythos 5.2 With Improved Bug Hunting, Fewer Sandbox Escapes

Anthropic has officially released Claude Mythos 5.2 and Claude Fable 5.2, the latest iterations of its AI models designed for specialized security and general-purpose tasks. While both models share the same underlying architecture, they differ significantly in their operational guardrails. Mythos 5.2 is an access-restricted model intended for vetted organizations participating in Anthropic’s…

nation-state

IRISSCON 2026 puts preparedness for cyberattacks and hybrid threats in focus

Ireland faces a critical need to bolster its national security infrastructure to counter a rising tide of sophisticated cyberattacks and hybrid threats. Ahead of the IRISSCON 2026 conference held at Dublin’s Aviva Stadium, experts have characterized the current state of national readiness as potentially inadequate. The discourse centers on the necessity of moving beyond isolated defensive…

security

Default Admin Password Let Researchers Unlock and Start Cars

Security researchers Shubham Shah and Sam Curry have disclosed a series of vulnerabilities that allowed them to remotely unlock and start vehicles by compromising the identity management infrastructure of two unnamed automotive brands. The researchers detailed their findings in separate reports published in early November 2026, noting that the flaws affected customer accounts across the United…

CVE-2026-123218

IBM Aspera Faspex, SignalWire FreeSwitch Vulnerabilities Exploited in Attacks

The Cybersecurity and Infrastructure Security Agency (CISA) has issued an urgent directive for federal agencies to remediate two critical vulnerabilities currently being exploited in the wild. The agency added CVE-2026-123218, affecting IBM Aspera Faspex, and CVE-2026-116779, impacting SignalWire FreeSwitch, to its Known Exploited Vulnerabilities (KEV) catalog. Under the requirements of…

breach

Binance Investigates ShinyHunters Breach Claims

Binance is currently investigating claims made by the threat actor group ShinyHunters, which alleges it has successfully breached the cryptocurrency exchange’s systems. On November 4, 2026, the group posted an advertisement on the PwsForums platform, asserting that it had obtained approximately 335.9 million records. The attackers are demanding a payment of $900,000, threatening to leak the…

security

France Blames Iran for Sabotage Attack on Refrigeration Controllers at About 700 Retail Sites

The French government has formally attributed a cyberattack targeting refrigeration controllers across approximately 700 retail locations to a cyber unit associated with Iran’s Islamic Revolutionary Guard Corps (IRGC). The incident, which occurred on the night of October 11, involved unauthorized access to industrial control systems used to manage temperature settings in commercial food…