{
	"id": "4fc76945-6785-4d2e-ad0e-3d9ca84f72f8",
	"created_at": "2026-04-06T00:08:48.545606Z",
	"updated_at": "2026-04-10T13:11:36.37722Z",
	"deleted_at": null,
	"sha1_hash": "ad35635eb7e39d71db3dde73e229cf215d334758",
	"title": "Two ransomware operators arrested in Ukraine",
	"llm_title": "",
	"authors": "",
	"file_creation_date": "0001-01-01T00:00:00Z",
	"file_modification_date": "0001-01-01T00:00:00Z",
	"file_size": 105697,
	"plain_text": "Two ransomware operators arrested in Ukraine\r\nBy Catalin Cimpanu\r\nPublished: 2022-12-16 · Archived: 2026-04-05 12:48:49 UTC\r\nTwo members of a ransomware gang were arrested in Ukraine following a joint international law enforcement\r\noperation.\r\nThe arrests took place last week, on September 28, in Kyiv, Ukraine's capital, and were carried out by officers of\r\nthe Ukrainian National Police, with aid from the French Gendarmerie, the FBI, Europol, and Interpol.\r\nTwo suspects were arrested, including a 25-year-old believed to be a crucial member of a large ransomware\r\noperation.\r\nOfficials declined to name the suspect's affiliation to any particular ransomware gang, citing an ongoing official\r\ninvestigation, a Europol spokesperson told The Record today.\r\nUkraine officials said in a press release the suspect was responsible for attacks on more than 100 companies across\r\nthe world and has caused more than $150 million in damages.\r\nFollowing searches at seven properties, including family members of the 25-year-old main suspect, officers seized\r\ncomputers used to access remote servers from where the ransomware was deployed, two cars, $375,000 in cash,\r\nand $1.3 million in cryptocurrencies.\r\nIn a press release, Europol said the suspects had been active since April 2020 and that their group was \"known for\r\ntheir extortionate ransom demands (between €5 to €70 million).\"\r\nSeveral security researchers have suggested that the two suspects arrested last week were members of the REvil\r\nransomware gang.\r\nThat certainly sounds like #REvil #ransomware. The #Kaseya ransom demand was famously $70\r\nMillion, and the average person may think REvil started in April 2020, with the famous hack of\r\nGrubman Shire Meiselas \u0026 Sacks happening about that time.\r\n— GarWarner (@GarWarner) October 4, 2021\r\nIn addition, a video of one of the house searches released by Ukrainian police shows officers sifting through\r\nunlocked computers and tablets, suggesting that investigators might have gained access to sensitive information\r\nthat may allow them to infiltrate the ransomware gang's structure.\r\nhttps://therecord.media/two-ransomware-operators-arrested-in-ukraine/\r\nPage 1 of 3\n\nEtt fel inträffade.\r\nDet går inte att köra JavaScript.\r\nGet more insights with the\r\nRecorded Future\r\nIntelligence Cloud.\r\nLearn more.\r\nNo previous article\r\nNo new articles\r\nhttps://therecord.media/two-ransomware-operators-arrested-in-ukraine/\r\nPage 2 of 3\n\nCatalin Cimpanu\r\nis a cybersecurity reporter who previously worked at ZDNet and Bleeping Computer, where he became a well-known name in the industry for his constant scoops on new vulnerabilities, cyberattacks, and law enforcement\r\nactions against hackers.\r\nSource: https://therecord.media/two-ransomware-operators-arrested-in-ukraine/\r\nhttps://therecord.media/two-ransomware-operators-arrested-in-ukraine/\r\nPage 3 of 3",
	"extraction_quality": 1,
	"language": "EN",
	"sources": [
		"ETDA"
	],
	"origins": [
		"web"
	],
	"references": [
		"https://therecord.media/two-ransomware-operators-arrested-in-ukraine/"
	],
	"report_names": [
		"two-ransomware-operators-arrested-in-ukraine"
	],
	"threat_actors": [],
	"ts_created_at": 1775434128,
	"ts_updated_at": 1775826696,
	"ts_creation_date": 0,
	"ts_modification_date": 0,
	"files": {
		"pdf": "https://archive.orkl.eu/ad35635eb7e39d71db3dde73e229cf215d334758.pdf",
		"text": "https://archive.orkl.eu/ad35635eb7e39d71db3dde73e229cf215d334758.txt",
		"img": "https://archive.orkl.eu/ad35635eb7e39d71db3dde73e229cf215d334758.jpg"
	}
}