Serbian Police Arrest Three Hackers in Major Ransomware Bust

Serbian authorities have dismantled a sophisticated hacking group known as "INF Grupa," arresting three members in what is being hailed as the largest ransomware investigation in the country's history. The Ministry of Interior (MUP) announced the successful operation, which targeted state institutions, major companies, and citizens' personal data across Serbia and the region.

“

In question is the largest ransomware investigation that led to the arrest of a hacker group and prevented the sale of stolen state data on the Darknet.

The arrested individuals, identified as N.M.S. (22) from Belgrade, L.D. (23) from Zaječar, and a 17-year-old from Belgrade, are accused of unauthorized access to protected computer systems and electronic data processing. L.D. also faces charges of computer sabotage, while the minor is suspected of extortion.

The "INF Grupa" allegedly compromised, encrypted, and stole vast amounts of sensitive data, including personal information of citizens. They are suspected of demanding ransoms in cryptocurrency for the non-disclosure of this stolen data. High-profile targets included the Republic Health Insurance Fund, the public bailiffs' registry, the Ministry of Interior's foreigners' registry, the Football Association of Serbia, Croatia's Ministry of Labor, the Croatian judicial system, Belgrade's public transport systems, and numerous large companies and organizations.

“

According to the findings so far regarding the number of attacks and compromised systems, this is the most active and operationally successful identified hacker group that has operated in the region to date.

Authorities emphasized that the timely intervention by the Service for Combating High-Tech Crime prevented the sale of compromised data from a state institution on the darknet. The operation also thwarted planned cyberattacks against several other state and private entities in Serbia. A search of the suspects' residences uncovered items believed to be used in the commission of the crimes. The MUP characterized "INF Grupa" as the most active and operationally successful identified hacker group in the region to date, labeling the bust as one of the most significant and successful anti-ransomware investigations in Europe in recent years.

“

This operation represents one of the most significant and successful investigations against ransomware crime conducted in Europe in the last few years.