Poland Arrests Four Suspects in SIM-Swapping Crypto Theft Case
Summary
Polish authorities arrested four suspects accused of breaching telecom partners and employee email accounts to enable SIM swaps and cryptocurrency account theft. Investigators estimate millions of dollars were stolen and laundered; the FBI and HSI supported the case.
Key points
- Polish authorities arrested four people accused of participating in an organized cybercrime group; all were placed in pre-trial detention.
- Investigators say the suspects accessed infrastructure used by telecommunications operators and employee email accounts.
- Data obtained through the alleged breaches was used to hijack victims’ phone numbers, intercept SMS messages and take over cryptocurrency exchange accounts.
- Authorities estimate the stolen funds reached millions of U.S. dollars and say they were laundered through bank accounts and digital wallets.
- The operation was conducted by Poland’s Cybercrime Bureau with support from the FBI and Homeland Security Investigations.
- Blockchain investigator ZachXBT identified one suspect as Wojtek Kulisz, also known as “Merry”; authorities did not name the suspects.
Article Details
- Event Type
- Arrests in an alleged SIM-swapping cybercrime operation
- Impact
- Polish authorities arrested four suspects accused of breaching telecommunications partners and employee email accounts to hijack victims’ phone numbers, intercept SMS codes, and access cryptocurrency exchange accounts. Investigators estimate that millions of U.S. dollars were stolen and laundered; CBZC said the total laundered exceeded several tens of millions of Polish zloty, estimated in the article as at least $5 million. The allegations and loss estimates are attributed to authorities.
People
Wojtek KuliszIdentified by investigators as a suspect arrested in the alleged cybercrime operation; the article reports that ZachXBT identified him from images released by authorities. His alleged involvement is not presented as a court finding.ZachXBTBlockchain crime investigator who identified Wojtek Kulisz as one of the suspects based on images released by authorities.
Threat Actors
MerryReported alias of Wojtek Kulisz, whom investigators identified as a suspect in the alleged cybercrime operation.Wojtek KuliszInvestigators identified him as one of four suspects arrested in connection with an alleged operation involving telecommunications breaches, email-account hijacking, SIM swapping, and cryptocurrency account theft. The allegations are not presented as proven.
Countries
Industries
Cryptocurrencypartners, hijacking email accounts, and carrying out SIM-swapping attacks to take over cryptocurrency exchange accounts.TelecommunicationsPolish authorities arrested four members of an organized cybercrime group accused of breaching telecommunications partners, hijacking email accounts, and carrying out SIM-swapping attacks to take over cryptocurrency