Top cybercrime platform admin earning millions captured by Ukraine and France

Law enforcement authorities from Ukraine and France, with the support of Europol, have arrested the administrator of one of the world's most influential cybercrime platforms. The suspect earned millions of euros through cybercriminal activities, according to an official press release from Europol.
The suspect is identified as the administrator of xss.is, a Russian-language cybercriminal forum considered one of the most influential in the world. The platform has over 50,000 registered users.
The forum served as a key marketplace for stolen data, hacking tools, and illegal services. Some of the world's most active and dangerous cybercriminal networks operated there, using it for advertising and recruitment.
The suspect was arrested in Kyiv on July 22 as part of a special operation to dismantle criminal cyber infrastructure. It is known that the forum administrator earned at least seven million euros from his activities.
The suspect was not merely a technical operator. For over 20 years, he acted as a trusted third party — resolving disputes, ensuring transaction security, and managing the private messaging service thesecure.biz.
The investigation into his activities began in 2021, and in September 2024, the operational phase of the special operation in Ukraine was launched. French law enforcement officers were deployed on-site, and a virtual command center was established with Europol's support. The investigation was conducted by:
- France: Paris Prosecutor (Parquet de Paris - JUNALCO), French Police - Paris Police Prefecture (Police française - Préfecture de Police de Paris - Brigade de lutte contre la cybercriminalité)
- Ukraine: General Prosecutor's Office of Ukraine (Офіс Генерального Прокурора України), Security Service of Ukraine – Cybercrime Department (Служба безпеки України - Кібердепартамент)
"Europol provided essential operational and analytical support throughout the investigation, facilitating information exchange and coordination between the French Police and Ukrainian authorities. Europol also assisted in mapping the cybercriminal infrastructure and linking the suspect to other major threat actors," the statement said.
Moment of cybercriminal's arrest (photo: europol.europa.eu)
Threat of cyberattacks from Russia
The Russia regime is actively using cyberattacks as part of its hybrid warfare against Europe. As a result, the European Union may establish a new independent agency to counter Russian disinformation and election interference.
Russia is actively using cyberattacks as part of its hybrid warfare against Europe. For example, cyberattacks on the German armed forces – the Bundeswehr – occur almost daily. Although serious damage has so far been avoided thanks to modern technologies and skilled professionals, the threat is growing.