Kyiv hacker collaborated with Russian groups in cyberattacks on European enterprises

A 28-year-old hacker, originally from the Kharkiv region but residing in Kyiv, collaborated with Russian hacker groups "LockBit" and "Conti" for a reward—disguising ransomware as safe files.

The Kyivan specialized in developing cryptors—special software to mask computer viruses as harmless files. Thanks to his programming skills, he could conceal malicious software from the most popular antivirus programs, as reported by the Cyberpolice.

One of the Russian hacker groups utilized the Kyivan's services for a reward in cryptocurrency to disguise the "Conti-malware" ransomware. At the end of 2021, group members infected the computer networks of enterprises in the Netherlands and Belgium with hidden malicious software. As a result of these actions, the systems became unusable, and the hackers demanded ransom for decrypting the computers.

During the investigation, cyber police established the suspect's involvement with the Russian hacker groups "LockBit" and "Conti," specializing in disrupting industrial enterprises by encrypting computer networks to extort ransom payments.

In addition to the search conducted by Ukrainian law enforcement agencies in Kyiv, at the request of Dutch law enforcement authorities, a search was carried out in the territory of the Kharkiv region. Computer equipment, mobile phones, and rough drafts were seized.

The suspect faces up to 15 years in prison.