--- title: "Ukraine identifies infostealer operator tied to 28,000 stolen accounts" url: https://daily.dev/posts/ukraine-identifies-infostealer-operator-tied-to-28-000-stolen-accounts-z5g9mgxoo source_url: https://www.bleepingcomputer.com/news/security/ukraine-identifies-infostealer-operator-tied-to-28-000-stolen-accounts type: article source: "BleepingComputer" published: 2026-05-20T21:40:23.861Z updated: 2026-05-20T23:02:33.732Z tags: ["security", "malware"] reading_time: 3 upvotes: 0 comments: 0 language: en --- > ## Documentation Index > Fetch the complete documentation index at: https://daily.dev/llms.txt > Use this file to discover all available pages before exploring further. # Ukraine identifies infostealer operator tied to 28,000 stolen accounts **[BleepingComputer](https://daily.dev/sources/bleepingcomputer)** · 3 min read · 0 upvotes · 0 comments ## Summary Ukrainian cyberpolice, in cooperation with U.S. law enforcement, has identified an 18-year-old from Odesa suspected of operating an infostealer malware campaign that compromised 28,000 accounts belonging to customers of a California online store. The attacker harvested browser session tokens and credentials between 2024 and 2025, using 5,800 of the stolen accounts to make unauthorized purchases totaling $721,000 and causing $250,000 in direct losses. Stolen data was processed and sold via Telegram bots and specialized online resources. Authorities conducted searches, seized devices and digital evidence, but no arrest has been announced yet. ## Full article daily.dev links to this article rather than hosting it. Read it at the original source: ## Similar posts on daily.dev - [Hackers arrested for hijacking and selling 610,000 Roblox accounts](https://daily.dev/posts/hackers-arrested-for-hijacking-and-selling-610-000-roblox-accounts-7e6lz2tep) · BleepingComputer · 0 upvotes · 0 comments - [US indicts alleged ransomware boss tied to $18B in damages](https://daily.dev/posts/us-indicts-alleged-ransomware-boss-tied-to-18b-in-damages-g12lzcv14) · The Register · 0 upvotes · 0 comments - [APT28 Targets Ukrainian UKR-net Users in Long-Running Credential Phishing Campaign](https://daily.dev/posts/apt28-targets-ukrainian-ukr-net-users-in-long-running-credential-phishing-campaign-gj6oavb3c) · The Hacker News · 0 upvotes · 0 comments - [Ukraine shuts down 94 fraudulent call centers, seize millions in cash](https://daily.dev/posts/ukraine-shuts-down-94-fraudulent-call-centers-seize-millions-in-cash-xwvpnf5dz) · BleepingComputer · 0 upvotes · 0 comments --- Tags: [#security](https://daily.dev/tags/security), [#malware](https://daily.dev/tags/malware) [View this post on daily.dev](https://daily.dev/posts/ukraine-identifies-infostealer-operator-tied-to-28-000-stolen-accounts-z5g9mgxoo)