Cybercrime Kingpin Arrested in Ukraine

In a significant blow to international cybercrime networks, authorities have arrested the suspected administrator of one of the largest Russian-speaking cybercrime forums, xss.is, in Ukraine. The arrest, carried out on July 22 in Kyiv, was the result of a long-term investigation led by French authorities in cooperation with Ukrainian law enforcement and Europol.

The forum, notorious for being a marketplace for stolen data, hacking tools, and illicit services, had over 50,000 registered users. The suspect, believed to have facilitated illegal activities for nearly two decades, allegedly amassed over EUR 7 million through advertising and facilitation fees. He also managed a private messaging service, thesecure.biz, designed to serve the cybercriminal underground.

The investigation, which began in France in 2021, intensified in September 2024 during operations in Ukraine. Europol played a crucial role, providing operational and analytical support, and coordinating between French and Ukrainian authorities to dismantle the criminal infrastructure. The recent enforcement actions included deploying a Europol mobile office to aid in evidence collection.

This operation aligns with Europol’s 2025 Internet Organised Crime Threat Assessment (IOCTA), which highlights data marketplaces as significant drivers of the cybercrime economy. The collaborative effort underscores the importance of international cooperation in tackling organized cybercrime.