Search — “VasyGrek”

Russian Interior Ministry, working with Kaspersky, dismantled the infrastructure of the VasyGrek (Fluffy Wolf) cybercrime group and identified three suspects, one placed under house arrest and two released under travel restrictions. The group used phishing sites impersonating financial and accounting services, foreign-hosted servers, and dark-web-purchased remote administration tools, with one cited attack involving a malicious attachment and unauthorized online banking transfers. The source gives no concrete command lines, event IDs, or indicators, so hunting should focus on phishing-delivered remote access tools and anomalous banking activity from accounting staff.