Romanian ransomware suspect arrested in joint Europol, FBI operation

Written by
Dec 13, 2021 | CYBERSCOOP

A Romanian man accused of using ransomware to target “high-profile” organizations and companies was arrested Monday as part of a joint operation between the Romanian National Police, the FBI, and Europol.

The man — identified only as a 41-year-old living in Craiova, Romania — is accused of compromising an unnamed Romanian IT services company with clients in the retail, energy and utilities sectors, according to a Europol statement posted to the agency’s website.

He then used that access to deploy ransomware and steal sensitive data from the IT company’s clients in Romania and abroad, before encrypting the files. The stolen data included financial information, personal information regarding employees and customers and other important documents.

The man then asked for a “sizeable ransom payment in cryptocurrency,” the Europol statement read, with the threat of posting the stolen data on cybercrime forums.

Allan Liska, the director of threat intelligence at cybersecurity firm Recorded Future, said Monday that based on the available information, this “appears to have been a one-off, not a traditional ransomware affiliate model.” It’s unclear whether the man was an insider threat, or had figured out how to break into

Read More: