Teenager from Odesa suspected of running infostealer malware operation

As outlined in Bleeping Computer, Ukrainian cyberpolice, in collaboration with U.S. law enforcement, have identified an 18-year-old man from Odesa suspected of orchestrating an infostealer malware operation that targeted users of a California-based online store.

The suspect allegedly used information-stealing malware between 2024 and 2025 to infect user devices, aiming to steal browser sessions and account credentials. The operation impacted approximately 28,000 customer accounts, with 5,800 accounts being used for unauthorized purchases totaling around $721,000. The malicious activity resulted in direct losses of $250,000, including chargebacks.

The suspect is believed to have managed the online infrastructure for processing, selling, and utilizing the stolen session data. Law enforcement conducted searches at the suspect's residences, seizing mobile phones, computer equipment, and other digital evidence allegedly linking him to the operation. The suspect also reportedly engaged in cryptocurrency transactions with accomplices.

Source: Bleeping Computer