TLDR
An 18 year old from Odesa, Ukraine, has been identified by Ukrainian cyberpolice (working with U.S. law enforcement) for running an infostealer operation that harvested credentials and session tokens from 28,000 victims between 2024 and...
How it works
An 18 year old from Odesa, Ukraine, has been identified by Ukrainian cyberpolice (working with U.S. law enforcement) for running an infostealer operation that harvested credentials and session tokens from 28,000 victims between 2024 and...
Red flags
- : • Unexpected device slowdown or unusual network activity — signs your system may be compromised • Login notifications for accounts you didn't access, especially across multiple services • Charges or purchases on payment methods you didn't authorize ✅
What to do
- 1Run a full system scan with a reputable anti malware solution and keep your security software updated
- 2Enable multi factor authentication (MFA) on all critical accounts — note that session tokens can bypass MFA, so also enable MFA push notifications
- 3Monitor bank and payment account statements regularly and revoke unfamiliar active sessions in your online account settings
Source
bleepingcomputer
Source reviewed by Mythos Forensic Team
https://www.bleepingcomputer.com/news/security/ukraine-identifies-infostealer-operator-tied-to-28-000-stolen-accounts/FAQ
Is Infostealer Malware Alert: Ukrainian Cyberpolice Bust Threat Actor Behind 28,000 Credential Thefts and $721K Fraud a real scam pattern?
Yes. Treat the message, call, or payment request as suspicious until you verify it through an official channel.
What are the first warning signs?
: • Unexpected device slowdown or unusual network activity — signs your system may be compromised • Login notifications for accounts you didn't access, especially across multiple services • Charges or purchases on payment methods you didn't authorize ✅
What should I do first?
Run a full system scan with a reputable anti malware solution and keep your security software updated; Enable multi factor authentication (MFA) on all critical accounts — note that session tokens can bypass MFA, so also enable MFA push notifications; Monitor bank and payment account statements regularly and revoke unfamiliar active sessions in your online account settings
Can LegalAudit check my case?
Yes. Start a free chat and paste the message, link, sender, or payment details for triage.