Poland Cybercrime Unit Exposes Massive Facebook Login Hacking Scheme Involving 100,000 Users

Post Views: 6

Cybercrime Operation Dismantled in Poland and Germany

A two-year investigation by Polish and German authorities has resulted in charges against 11 individuals accused of orchestrating a large-scale cybercrime operation.

Investigation and Charges

The investigation, led by the Białystok Board of the Central Bureau for Combating Cybercrime, uncovered a complex scheme that targeted social media users in Poland and Germany between May 2022 and May 2024.

The group’s activities were characterized as a structured enterprise responsible for hundreds of alleged offenses, including leading and participating in an organized criminal group, unlawfully taking over access to accounts and inboxes, internet fraud, and money laundering.

“The suspects used a tactic known as ‘urgency phishing,’ creating fake news websites with sensational headlines, including false reports of a celebrity’s death. When users clicked on links to these pages, they were prompted to enter their login credentials, which were then intercepted by the group.”

Scope of the Operation

Over 100,000 login credentials and passwords were seized during the investigation, demonstrating the operation’s scale and reach.

Authorities also seized assets equivalent to 1,000,000 Polish złoty, which may be used to compensate victims for losses incurred as a result of the alleged crimes.

Consequences and Next Steps

Prosecutors said the group’s activities extended beyond unauthorized account access, with charges including internet fraud and money laundering.

In some cases, the stolen credentials were used to facilitate financial crimes, including fraud involving Poland’s BLIK payment system.

Authorities are seeking information from injured parties about whether such incidents occurred and whether they were reported to law enforcement.

The Polish authorities have issued a public advisory urging individuals to verify whether their login details had been compromised.

Users can check whether their addresses were included in the data seized during the investigation on a government website.

If a data leak is detected, affected individuals are asked to contact the investigator handling the case and provide information about the incident, including any financial losses linked to BLIK code fraud.