Europol: 7 arrested in Cybercrime-as-a-Service takedown


An action day performed in Latvia on 10 October 2025 led to the arrest of five cybercriminals of Latvian nationality and the seizure of infrastructure used to enable crimes against thousands of victims across Europe.

During the operation codenamed ‘SIMCARTEL’, law enforcement arrested two further suspects, took down five servers and seized 1 200 SIM box devices alongside 40 000 active SIM cards. Investigators from Austria, Estonia and Latvia, together with their colleagues at Europol und Eurojust, were able to attribute to the criminal network more than 1 700 individual cyber fraud cases in Austria and 1 500 in Latvia, with a total loss of several million euros. The financial loss in Austria alone amounts to around EUR 4.5 million, as well as EUR 420 000 in Latvia.

Read more…
Source: Europol


Sign up for the Cyber Security Review Newsletter
The latest cyber security news and insights delivered right to your inbox


Related:

  • UK: Thousands of EU citizens ‘wrongly fined for breaching Ulez rules’ in potential record data breach

    January 26, 2024

    Hundreds of thousands of EU citizens were wrongly fined for driving in London’s Ultra Low Emission Zone (Ulez), amid claims of a record data breach. Several EU countries have accused Transport for London (TfL) of illegally obtaining the names and addresses of their citizens to issue the penalties, The Guardian reports. The paper said more than ...

  • UK councils remain downed by cyberattack

    January 26, 2024

    Three local councils in the United Kingdom continue to experience disruption to their online services, a week after confirming a cyberattack had knocked some systems offline. The councils for Canterbury, Dover, and Thanet — all of which are based in the U.K. county of Kent and have a combined population of almost 500,000 residents — said ...

  • Russian hackers attack Ukraine MoD resources

    January 25, 2024

    Cyber attacks by Russian government-funded groups on the resources run by the Ministry of Defense using phishing, distribution of remote code execution malware, and blocking of access to web resources have been recorded. “Last day, attacks on Ukraine’s government and commercial sectors were recorded. Also, attacks by Russia-funded hacker groups were launched on the resources of ...

  • UK: Cybercriminals claim to have stolen data from Southern Water

    January 24, 2024

    Cybercriminals claim they have stolen data from a water company’s IT systems. Southern Water, which has hundreds of thousands of customers in Kent, says it has detected suspicious activity and launched an investigation led by cybersecurity experts. But it says there is no evidence to suggest “customer relationships or financial systems” have been affected. In a ...

  • Denmark allocates €12 million for cyber security in Ukraine’s Armed Forces and Defence Ministry within IT coalition

    January 24, 2024

    Denmark has announced assistance worth more than €12 million to develop the cyber resilience of the systems of the Armed Forces of Ukraine and the Ministry of Defence of Ukraine. As part of the new Ramstein-format meeting on 23 January, Denmark and other member countries of the IT coalition signed a cooperation agreement that outlines the ...

  • Threat Assessment: BianLian ransomware group

    January 23, 2024

    Unit 42 researchers have been tracking the BianLian ransomware group, which has been in the top 10 of the most active groups based on leak site data they’ve gathered. From that leak site data, Unit 42 primarily observed activity affecting the healthcare and manufacturing sectors and industries, and impacting organizations mainly in the United States (US) ...