The criminals sent phishing links that allowed them to access the victims’ online banking accounts. In this way, the fraudsters embezzled at least UAH 800 thousand.
Investigators have served six offenders a notice of suspicion under a number of articles of the Criminal Code of Ukraine.
Cyberpolice of Lviv region together with investigators of the Investigation Department of the Lviv District Police Department No. 1 of the Main National Police under the procedural supervision of the Lviv Regional Prosecutor’s Office and the Halych District Prosecutor’s Office of Lviv stopped the activities of a criminal organisation, whose members included citizens of Belarus and Russia.
The criminals used phishing links to steal money from citizens’ bank accounts. “The criminals used several schemes and had access to an extensive network of drops.
For example, the offenders created duplicate websites of well-known Ukrainian marketplaces, as well as government and charitable organisations.
They used social media and messengers to distribute links to relevant phishing resources. Potential victims were persuaded to enter financial data on controlled resources under the pretext of receiving financial assistance allegedly from the President of Ukraine, the UN, UNICEF and other organisations.
Another criminal scenario involved luring confidential information from marketplace users through phishing by promising favourable trade offers.
By clicking on a phishing link and entering their personal data on such resources, the victims actually provided the offenders with access to their online banking accounts, from where the criminals then withdrew funds to drop accounts.
To confirm the financial transactions, the criminals called the victims on behalf of alleged bank employees and convinced them of the security of these transactions.
The police established that the amount of damage caused to the victims was about UAH 800 thousand.
Law enforcement officers conducted a series of searches at the residences, registration offices and cars of the offenders in Lviv and Lviv region. As a result, dozens of computer equipment and components, mobile phones, bank and SIM cards, a premium car and other material evidence of criminal activity were seized.
The police detained the organiser of the criminal group and three of his accomplices in accordance with Article 208 of the Criminal Procedure Code of Ukraine.
Investigators served the suspects notices of suspicion under a number of articles of the Criminal Code of Ukraine in accordance with their roles: Part 5 of Article 190 (Fraud), Part 1, 2 of Article 255 (Creation, management of a criminal community or criminal organisation, as well as participation in it) and Part 2 of Article 361 (Unauthorised interference with the work of information (automated), electronic communication, information and communication systems, electronic communication networks) of the Criminal Code of Ukraine. They have been chosen custody as a measure of restraint.
Investigators served two more offenders suspicion notices in absentia. The pre-trial investigation is ongoing. Law enforcement officers are identifying all persons involved in the activities of the criminal group, the final number of victims, and the amount of damage caused.
In addition, the police are checking the suspects for involvement in the distribution of malware that allowed for hidden remote control of the victims’ gadgets.
The detection of the criminals was facilitated by the security service of PrivatBank JSC.
The Cyber Police Department of the
of the National Police of Ukraine