Ransomware Group Responsible for Significant Attacks in 71 Countries Dismantled in International Operation

Ransomware Group Responsible for Significant Attacks in 71 Countries Dismantled in International Operation

Judicial and law enforcement authorities from seven different countries have joined forces in an action against a criminal network responsible for significant ransomware attacks across the world. These attacks are believed to have affected over 1,800 victims in 71 countries. The perpetrators targeted large corporations, effectively bringing their business to a standstill and causing losses of at least several hundred millions of euros.

A recent operation supported by Eurojust and Europol led to the arrest of the ringleader and the detention of four suspects in Ukraine. A total of 30 places were searched and over a hundred digital equipment tools were seized.

More than 20 investigators from Norway, France, Germany and the United States were deployed to Kyiv to assist the Ukrainian authorities. This latest action follows a first round of arrests in 2021 in the framework of the same investigation.

The perpetrators are believed to have played different roles in the criminal network. Some were involved in the infiltration attempts, using multiple mechanisms to compromise IT networks, including brute force attacks, so-called SQL injection techniques to attack data applications, stolen credentials and phishing emails with malicious attachments. Once inside the network, some of these cyber actors used malware such or post-exploitation frameworks to remain undetected and gain further access.

After remaining undetected in the compromised systems, sometimes for months, the criminals would deploy different types of ransomware. A ransom note was then presented to the victim to pay the attackers in bitcoin in exchange for decryption keys.

Initiated by the French authorities, a joint investigation team (JIT) was set up in September 2019 between Norway, France, the United Kingdom and Ukraine with financial support from Eurojust and assistance from both agencies. Since them, the partners in the JIT have been working closely together, in parallel with independent investigations by the Dutch, German, Swiss and US authorities to uncover the true magnitude and complexity of the criminal activities of these cyber actors and to establish a joint strategy.

Eurojust has hosted 12 coordination meetings to facilitate the communication and judicial cooperation between the authorities involved.

From the onset of the investigation, Europol’s European Cybercrime Centre has been hosting operational meetings, providing digital forensic, cryptocurrency and malware support and facilitating the information exchange in the framework of the Joint Cybercrime Action Taskforce hosted at Europol’s headquarters.

Image by Michael Geiger/Via UnSplash/https://unsplash.com/license

 

Antoinette Tyrrell is a writer and journalist who started her career in print and broadcast journalism in Ireland. An English and History graduate of the National University of Ireland, Maynooth, she worked for 11 years in corporate public relations for Irish Government bodies in the Foreign Direct Investment and Energy sectors.

She is the founder of GoWrite, a business writing and public relations consultancy. Her work has appeared in a range of national and international media and trade publications. She is also a traditionally published novelist of commercial fiction.

newsletter
Join our mailing list and never miss an update !
EU Reaffirms Commitment to Eradicate Female Genital Mutilation

EU Reaffirms Commitment to Eradicate Female Genital Mutilation

The European Commission has reaffirmed its strong commitment to eradicate Female Genital Mutilation worldwide, ahead of the International Day of Zero Tolerance for Female Genital Mutilation on 6 February 2024. It

Measles Surge Across WHO European Region

Measles Surge Across WHO European Region

Measles continues to spread in the WHO European Region, with over 42,200 cases reported by 41 Member States for 2023. The WHO European Region, comprises 53 countries, covering a vast

New EU Initiatives Proposed to Strengthen Economic Security

New EU Initiatives Proposed to Strengthen Economic Security

The EU Commission has adopted five initiatives to strengthen the EU's economic security at a time of growing geopolitical tensions and profound technological shifts. The package aims to enhance the