Ukraine Busts Massive Cybercrime Scheme Behind 28,000 Stolen Accounts

Ukrainian police disclosed a cross-border account theft operation that used infostealer malware to harvest browser-stored credentials and session cookies from customers of a California online retailer, compromising over 28,000 accounts (about 5,800 used for fraudulent purchases totaling roughly $721,000). Authorities arrested an 18-year-old suspect in Odessa, seized phones, computers, storage devices, bank cards and crypto account information, and reported the stolen data was processed and sold via underground marketplaces and Telegram bots; the investigation is ongoing.