{"id":84672,"date":"2021-02-09T11:51:40","date_gmt":"2021-02-09T19:51:40","guid":{"rendered":"https:\/\/www.theaegisalliance.com\/?p=84672"},"modified":"2026-09-01T05:23:13","modified_gmt":"2026-09-01T12:23:13","slug":"ukraine-u-admin-arrest","status":"publish","type":"post","link":"https:\/\/theaegisalliance.com\/fr\/2021\/02\/09\/arrestation-de-ladministration-ukrainienne\/","title":{"rendered":"Ukraine Arrested the Author of U-Admin, a Phishing-as-a-Service Kit Used Against Banks in 11 Countries"},"content":{"rendered":"
\"Ukrainian
Computer gear, cellphones, and hard drives were seized as part of five authorized searches during the operation.<\/figcaption><\/figure>\n

TERNOPIL REGION, UKRAINE \u2014<\/strong> Ukrainian cyber police, working with the FBI and Australian Federal Police, arrested a 39-year-old man they say wrote U-Admin \u2014 also sold as Universal Admin and uPanel \u2014 a phishing-as-a-service kit that had been running since about 2016. The suspect used the handle Kaktys on crime forums. Five searches pulled computers, phones, and drives. Officials said the kit had been used against financial institutions in 11 countries. In Australia, authorities attributed more than 50 percent of 2019 phishing attacks to U-Admin and described hundreds of SMS campaigns that hit nearly every adult in the country several times.<\/p>\n

Brian Krebs<\/a> broke the technical picture. U-Admin was not a lone HTML page. It was a control panel with a phishing-page generator, a victim tracker, mule management, and a web-inject module that could prompt a target for a two-factor code. Operators bought branded pages that mimicked banks and social networks. Some paired the kit with malware such as Qakbot so a stolen session could move money. Hundreds of customers were identified. The author faced up to six years if convicted under Ukrainian law.<\/p>\n

\n
\""Phishing