Ukrainian Police Arrest Alleged Operator of Major Russian Cybercrime Forum

Ukrainian police, aided by French and Europol investigators, arrest suspected administrator of long-running Russian-language cybercrime forum.

International operation brings alleged forum admin to justice

Authorities in Ukraine have arrested a man accused of operating one of the most prominent Russian-language cybercrime forums on the internet, XSS[.]is. The arrest, the result of a four-year investigation led by the Paris public prosecutors’ office, took place in Kyiv, in coordination with Europol.

XSS[.]is was a notorious cybercrime hub that dealt in stolen data, malware distribution and access to compromised networks. After emerging in 2013, it amassed over 50,000 registered users and served as a gateway for organized cybercrime, including ransomware and recruitment.

Europol: The forum was a key player in cybercrime

According to Europol, the now-defunct forum played a crucial role in connecting threat actors worldwide.

“Platforms like xss.is enabled the trade and monetisation of compromised data, hacking tools, and illicit services that fuel a wide range of criminal activities - from ransomware and fraud to identity theft and extortion,” Europol says in a press release.

Investigators also seized the domain associated with the forum and are now examining digital evidence recovered from the site to trace criminal networks and ongoing threats across international borders.

Suspect linked to long-term cybercrime operation

Although authorities have yet to name the person they arrested, they believe he was deeply involved in cybercrime for nearly 20 years. Surveillance and wiretaps allegedly revealed that the suspect earned millions by facilitating illegal activity online.

Investigators also linked the individual to a private communication platform believed to be favored by threat actors. The Jabber-based messaging site, which was active at the time of the arrest, is now under scrutiny as part of the larger investigation.

International cooperation at the core of the operation’s success

The investigation started in mid-2021, with French cybercrime experts working with Ukrainian police and Europol. A deployment to Ukraine in 2024 helped accelerate the operation, ultimately leading to the arrest and seizure of infrastructure.

Officials emphasized the growing importance of international partnerships in combating cybercrime. They said they expect insights from seized data to support further arrests and the dismantling of related cybercriminal syndicates in Europe and beyond.

Staying safe against cyber threats

Although cybercrime is on the rise, a dedicated security suite like Bitdefender Ultimate Security can give you the upper hand against digital intrusions.

It protects you against viruses, ransomware, Trojans, worms, spyware, zero-day exploits, rootkits, and other digital threats.

Its key features include multi-layered ransomware protection, comprehensive real-time data protection, network threat prevention, cryptomining protection, behavioral analysis for active apps, a built-in VPN, and AI-powered scam detection.