Three members of the VasyGrek hacker group arrested in Russia
An overview of the recent arrest of three suspected members of the VasyGrek threat group, known as Fluffy Wolf, detailing their financially motivated phishing operations, fraudulent business correspondence tactics, and m
An overview of the recent arrest of three suspected members of the VasyGrek threat group, known as Fluffy Wolf, detailing their financially motivated phishing operations, fraudulent business correspondence tactics, and multi-year targeting of enterprise infrastructure.
The categories and the mode of action
According to the Russian Interior Ministry, the suspects are accused of stealing money and creating dangerous programs. In one incident in September 2025, the perpetrators sent a deceptive email that appeared to be business correspondence. The message invited recipients to open a financial transaction report, resulting in the loss of 660.000 rubles from the organizationβs bank account.
To carry out their attacks, the perpetrators used websites that mimicked financial sites, remote servers abroad, and remote control tools from the dark web. During searches of the suspects' homes and offices, authorities seized electronic equipment and communication devices.
The group's broad activity
Security firms such as BI.ZONE and F6 believe that VasyGrek focuses on financial targets and uses emails with financial documents attached. Meanwhile, Kaspersky recorded more than 100 attempted attacks by the group against organizations in Russia, Belarus and Kazakhstan between January and September 2026.
β³
READ ALSO
HACKS.GR / RELATED
Cyber ββAttacks & Data Breaches
Cyberattacks on supermarkets destroy food by raising the temperature in refrigerators
β
The group's targets included companies in the metals, energy, healthcare, government services, raw materials supplies, industrial supplies, finance and agriculture sectors.
>Stay connected with Hacks.gr
Set us as a preferred source on Google and find us on social media.
Preferred source
β
end of article
Originally published by Dev.to Security. Aggregated on AIWithGhost for educational purposes β full credit and traffic to the original publisher.