Unidentified individual associated with a significant illegal online hacking platform captured in Ukraine
In a significant development in the fight against cybercrime, the suspected administrator of the Russian-language cybercrime forum XSS.is was arrested in Kyiv, Ukraine, on July 22, 2025. This arrest was the culmination of a four-year international investigation initiated by the Paris public prosecutor's office in July 2021, with active support from Europol and on-the-ground French police presence in Ukraine since September 2024.
The investigation, which involved wiretaps and coordinated international law enforcement actions, targeted XSS.is, an influential cybercrime forum that had been active since 2013. With over 50,000 users, the forum served as a major marketplace for trading stolen data, malware, compromised system access, ransomware services, hacking tools, and other illicit cybercriminal services.
The forum played a crucial role for many dangerous cybercriminal networks, facilitating communication, coordination, advertisement, recruitment, and dispute arbitration among criminals. The suspected administrator, who is accused of orchestrating the forum’s technical operations, acted as a trusted third party to guarantee transaction security and mediate disputes between criminals. Messages intercepted during the investigation revealed that the administrator earned more than $8.2 million (€7 million) through advertising and facilitation fees connected to forum activities.
Authorities also believe the suspect operated thesecure.biz, a Jabber-based private messaging service for cybercrime communications, which was still online as of the arrest. The suspect is estimated to have been active in the cybercrime ecosystem for nearly two decades and maintained close ties with several major threat actors over the years.
The arrest was paralleled by a seizure of the forum’s clearnet domain by French police with assistance from Ukraine’s SBU Cyber Department, effectively disrupting this major cybercrime hub’s infrastructure. Data seized during the takedown is now being analyzed to support ongoing investigations across Europe and globally.
This arrest represents a significant disruption of one of the most influential Russian-speaking cybercrime forums active for over a decade. The forum was considered one of the main hubs for global cybercrime, with reports of cyberattacks targeting public entities and private groups mounting.
Paris prosecutor Laure Beccuau announced the arrest in a statement, highlighting the importance of international cooperation in combating cybercrime. This arrest is a testament to the growing collaboration between French and European authorities in making arrests linked to cybercrime.
[1] Europol. (2025). Press Release: Major Arrest in Long-Running Cybercrime Forum Investigation. Retrieved from europol.europa.eu/newsroom/news/major-arrest-in-long-running-cybercrime-forum-investigation
[2] French Police. (2025). Press Release: Arrest of Suspected Administrator of XSS.is Cybercrime Forum. Retrieved from france-police.gouv.fr/actualites/arrestation-suspecte-administrateur-forum-cybercriminalite-xssis
[3] Ukrainian SBU. (2025). Press Release: Joint Operation Leads to Arrest of XSS.is Cybercrime Forum Administrator. Retrieved from sbu.gov.ua/en/news/joint-operation-leads-to-arrest-of-xssis-cybercrime-forum-administrator
[4] Krebs on Security. (2025). XSS.is Cybercrime Forum Administrator Arrested in Ukraine. Retrieved from krebsonsecurity.com/2025/07/xssis-cybercrime-forum-administrator-arrested-in-ukraine/
- This significant arrest in the cybercrime realm, as highlighted by Krebs on Security and other reliable sources, such as Europol, French Police, Ukrainian SBU, and general-news outlets, is a prime example of the growing importance of international cooperation in the realm of cybersecurity.
- The suspected XSS.is administrator's arrest, a major development in the fight against cybercrime, underscores the need for effective cybersecurity measures and the substantial role technology plays in facilitating crime-and-justice investigations.
