Ukrainian police have arrested a 35-year-old man suspected of hacking 5.000 accounts at an international hosting company. The hacker used these accounts to mine cryptocurrency, causing an estimated $4,5 million in damage dollar.
According to the police statement, the suspect illegally gained access to more than 5.000 customer accounts of a hosting company that rents servers to websites and online platforms. After gaining access, he unauthorizedly set up virtual machines — software that simulates a computer — to abuse the company's server capacity.
The hacker used the hosting company’s servers to mine cryptocurrencies, without the knowledge of the customers or the company itself. The total damage of this operation is estimated at 4,5 million dollars. The suspect’s activities began in 2018. He used open-source intelligence to detect and penetrate vulnerable systems of international organizations.
To avoid the authorities, the man moved frequently. In recent years, he has stayed in the regions of Poltava, Odesa, Zaporizhia and Dnipropetrovsk, among others. During a house search, the police found computer equipment, mobile phones, bank cards and other evidence.
Initial investigation shows that the suspect was active on multiple hacker forums. His computer contained stolen email data, Wallets with illegally obtained cryptocurrencies, scripts for setting up mining operations, and software for data theft and remote access.
The man is being prosecuted under Article 361, Part 5 of the Ukrainian Criminal Code. If convicted, he faces up to 15 years in prison and a three-year ban on risky activities. Police stress that the investigation is ongoing and that additional charges may follow. It is not yet clear whether the hosting company's customers will be liable for the costs of the unauthorized use of their accounts.
To prevent these types of incidents, experts recommend using strong, unique passwords and two-factor authentication for accounts that access cloud or server services. Additionally, regularly monitor your account activity to detect suspicious access early.
What exactly did the hacker do?
He hacked 5.000 accounts of an international hosting company and used them to mine cryptocurrency, causing $4,5 million in damages.
How long was the hacker active and how did he manage to stay under the radar?
He has been active since 2018, frequently changing locations within Ukraine to avoid detection.
What can companies and individuals do to protect themselves against such attacks?
Use strong, unique passwords, enable two-factor authentication, and monitor your account activity regularly to quickly spot unwanted access.