News

$10M Reward for Info on Cyberattack Mastermind Behind Global Company Hacks – Ukraine Police

Neutralizing a High-Impact Hacker Group

On September 11, 2025, Ukrainian law enforcement announced the successful dismantling of a hacker group responsible for deploying ransomware attacks on top global firms. These attacks caused billions in losses worldwide.

Many members arrested, prosecuted, and had assets frozen
One leader charged in absentia and placed on an international wanted list

FBI’s $10 Million Bounty

The FBI has placed a $10 million reward for information leading to the arrest of a key suspect, a Ukrainian citizen, who remains at large. This individual is also among the European Union’s most-wanted cybercriminals.

International Investigation Efforts

Operation began in November 2023 under Ukraine’s Cyberpolice, National Police Investigations Department, and Prosecutor General’s Office
Collaboration involved Europol, Eurojust, the US, Norway, Netherlands, Germany, and France

Historical data uncovered:

Attacks since 2018 targeted corporate servers in France, Norway, Germany, Netherlands, Canada, and the US
Over 1,000 servers encrypted, losses exceeded ₴3 billion (UAH)

Legal Proceedings and Charges

One active participant faces up to 12 years in prison for unauthorized access, malware creation, and extortion.

Structure and Methods of the Cybercriminal Network

The group had a complete hierarchy:

Malware developers
Hackers breaching corporate systems
Money launderers

They used ransomware families LockerGoga, MegaCortex, HIVE, and Dharma, demanding crypto ransoms to unlock data. Experts estimate damages in the billions globally.

Current Status and Ongoing Search

Several members are in detention and court. A foreign national wanted by the FBI remains at large and a top priority for international law enforcement. The investigation includes agencies from Ukraine, Norway, France, Germany, the US, and the UK.