Russian Police Arrest 3 Suspected Vasy Grek Hackers, Dismantle Criminal Infrastructure
Summary: Russian authorities arrested three suspected members of the VasyGrek group, also known as Fluffy Wolf, and dismantled its criminal infrastructure, with the MVD citing a September 2025 phishing case in which an organization lost 660,000 rubles ($8,000) from its bank account. Kaspersky reported over 100 attempted VasyGrek attacks against organizations in Russia, Belarus, and Kazakhstan between January and September 2026, using decoy documents to drop a Golang backdoor and tools including MetaStealer, WarZone RAT, and Remote Utilities.
Why it matters: The group's reach widened from Russian targets to Belarus and Kazakhstan this year, and its use of legitimate online services to host malicious components is what Kaspersky says hindered attack analysis - the same hosting your own filtering may treat as trusted.
Read the original at The Hacker News ↗
- Topics
- Cybercrime & Law Enforcement
- Related
- Gootloader Malware Disrupted After Infecting 25,000 Computers Cyber Risks · Nov 13, 2026354 dark web vendors and buyers arrested in Operation Tor Nado Cyber Risks · Nov 13, 2026Law Enforcement Disrupts Gootloader, CastleRAT, and StealC Infrastructure Cyber Risks · Nov 13, 2026