XSS forum admin arrested in Kyiv, Europol claims

A person suspected of being the administrator for the Russian language cybercriminal forum XSS.is was arrested in Ukraine, with the assistance of the French police and Europol.

XSS.is is one of the leading cybercrime platforms globally, with new data leaks posted on the forum daily. According to Europol, the long-running investigation was lead by the French Police and Paris Prosecutor, in cooperation with Europol.

“The forum, which had more than 50 000 registered users, served as a key marketplace for stolen data, hacking tools and illicit services. It has long been a central platform for some of the most active and dangerous cybercriminal networks, used to coordinate, advertise and recruit,” Europol said.

Active since 2013, this forum was one of the main hubs for global cybercrime. It facilitated the sale of malware, access to compromised systems, stolen data, and ransomware-related services. The forum was paired with an encrypted Jabber messaging server, facilitating anonymous exchanges between cybercriminals, the statement added.

According to Europol, the arrest took place in Kyiv, Ukraine on Monday. The suspect is believed to have played a key role in enabling the forum's activity, while not being a technical operator himself.

“Acting as a trusted third party, he arbitrated disputes between criminals and guaranteed the security of transactions. He is also believed to have run thesecure.biz, a private messaging service tailored to the needs of the cybercriminal underground,” Europol said.

Illicit activities were highly profitable for the suspect, with authorities estimating him earning €7 million in advertising and facilitation fees.