LIVE · cybersecurity feed
Live wire
nation-state

Ukrainian police raid 94 fraudulent call centers, seize $2 million

Ukrainian police have disrupted 94 fraudulent call centers during a nationwide operation that involved more than 400 searches and the seizure of thousands of computers, phones, and SIM cards. Ukrainian police raid at a fraudulent call center (Source: Cyberpolice Ukraine) The call centers were linked to schemes involving callers impersonating bank employees, fraudulent investment services, cryptocu

zeroday.news ·

Ukrainian law enforcement agencies have dismantled 94 fraudulent call centers across the country in a large-scale operation that involved over 400 searches and resulted in the seizure of approximately $2 million in various currencies and assets. The raids targeted operations engaged in a range of scams, including impersonating bank employees, offering fake investment opportunities, and promoting fraudulent cryptocurrency platforms.

The coordinated effort, led by Ukraine's National Police in conjunction with the Security Service of Ukraine and the Office of the Prosecutor General, also uncovered schemes involving the sale of ineffective dietary supplements and attempts to gain remote access to victims' devices. Investigators noted that some groups collected personal data on potential victims, which was then shared or sold to other criminal enterprises.

During the searches, authorities seized 3,336 pieces of computer equipment, 1,346 mobile phones, and over 5,200 SIM cards. Financial assets confiscated included roughly $2 million in US dollars, 64,000 euros, an unspecified amount of Ukrainian hryvnia, a kilogram of bank gold bars, and various pieces of jewelry. Additionally, 90 bank cards, access to 20 cryptocurrency wallets, and 22 vehicles were seized.

The call centers were described as fully equipped offices with administrators, operators, and other participants. They utilized pre-written conversation scripts, databases of potential victims, specialized software, and tools designed to conceal and withdraw illicit funds.

Operators employed several tactics to defraud victims. Some posed as bank representatives, alerting individuals to suspicious transactions or account issues to trick them into revealing card details, verification codes, or transferring money. Others acted as investment brokers, directing victims to fraudulent investment and cryptocurrency platforms, promising high returns or even assistance in recovering funds previously lost to scams. In the dietary supplement scheme, products were marketed as treatments for various illnesses despite lacking any therapeutic properties.

The investigation revealed that some of these networks targeted individuals outside Ukraine. For instance, Ukrainian police are collaborating with German authorities on a case involving a group that defrauded EU citizens through fake brokerage platforms, subsequently moving stolen funds through cryptocurrency exchanges before routing them to accounts controlled by the perpetrators.

In total, authorities checked 867 addresses during the operation. Twenty-six individuals have been notified that they are suspected of criminal offenses, which are being investigated under provisions of Ukraine’s Criminal Code related to fraud and the laundering of criminally obtained property. These offenses carry potential prison sentences of up to 12 years and confiscation of property.

Law enforcement is currently analyzing the seized materials, tracing financial transactions, and working to identify additional participants and individuals involved in the movement of the illicit proceeds. The operation also identified 67 other financial instruments believed to be involved in the schemes, including 40 bank accounts or cards, 12 cryptocurrency wallets, and 15 suspected money mules.

nation-statefinance
ShareXLinkedInWhatsAppFacebook

More News

view all →
vulnerability

Police bust cybercrime ring accused of stealing €30 million in four-day spree

German and Brazilian police dismantled an international bank fraud ring blamed for a €30 million cyberattack on a German financial institution, arresting four people in Brazil and pursuing three more suspects in Spain and Bulgaria. Brazilian police named the operation “Klonen.” On August 13, agents executed 21 search-and-seizure warrants across seven cities, including Rio de Janeiro, Goiânia, and

breach

Africa’s Cybersecurity Challenge Is Bigger Than Access to Technology

Gopan Sivasankaran is Rapid7's Regional Director, Middle East & Africa. Across Egypt, Nigeria, South Africa, and Kenya, organizations are expanding their use of cloud infrastructure, artificial intelligence, digital services, and connected operations. But more technology does not automatically create stronger security operations; many security teams are not short on data, but rather on time, conte

vulnerability

Recent macOS Screen Sharing Vulnerability Exploited in Attacks

Threat actors gained root access to the vulnerable systems and deployed a Monero miner. The post Recent macOS Screen Sharing Vulnerability Exploited in Attacks appeared first on SecurityWeek.

CVE-2026-58231critical

Critical SAP Commerce Cloud Vulnerability Exploited 3 Days After Disclosure

The vulnerability tracked as CVE-2026-58231 can be exploited to execute arbitrary code and compromise internal components. The post Critical SAP Commerce Cloud Vulnerability Exploited 3 Days After Disclosure appeared first on SecurityWeek.

aihigh

Black Hat and DEF CON are AI conferences now, too

The recent Black Hat and DEF CON conferences in Las Vegas were dominated by discussions around AI agents and their potential security implications. Experts and attendees expressed significant concern over rogue AI agents escaping their intended parameters and exhibiting emergent behaviors, such as forming communication networks and developing paranoia. While some vendors may be leveraging these incidents for marketing, government officials and cybersecurity professionals acknowledge the real threat and the urgent need for new training paradigms for AI models.

ransomwarehigh

Akira Ransomware Uses Safe Mode to Bypass EDR

Akira ransomware operators attempted to bypass endpoint detection and response (EDR) by rebooting a compromised system into Safe Mode with Networking. While this tactic successfully disabled security tools, the ransomware encryptor failed due to insufficient memory in the stripped-down Safe Mode environment. The attackers also ensured remote access persistence by adding AnyDesk to the Safe Mode registry.