Polish authorities have arrested four members of an organized cybercrime group accused of breaching telecom partners and hijacking email accounts to carry out SIM-swapping attacks. The operation was carried out by the Polish Cybercrime Bureau with support from the FBI and Homeland Security Investigations.
The suspects used specialized software and social engineering to gain unauthorized access to telecom infrastructure and employee email accounts. They then cloned victims’ phone numbers, intercepted SMS and email communications, and took over accounts at cryptocurrency exchanges.
Investigators estimate millions of dollars were stolen and laundered through a distributed financial network across multiple bank accounts and digital wallets in different countries. The Polish Cybercrime Bureau said the total value exceeds several tens of millions of Polish zloty — at least $5 million at current exchange rates.
Blockchain investigator ZachXBT identified one of the arrested individuals as Wojtek Kulisz, known as Merry, based on images released from the police raid.
The four suspects, now in pre-trial detention, face charges including participation in an organized criminal group, hacking IT systems for theft, and money laundering. The maximum penalty is 25 years in prison.
