Europol has arrested the suspected administrator of xss.is, one of the most influential Russian-speaking cybercrime forums, marking a breakthrough in the fight against cybercrime.
The arrest took place in Kyiv, Ukraine, on 22 July 2025, following a long-running investigation led by French authorities in close cooperation with Ukrainian counterparts and Europol.
The forum, which had over 50,000 registered users, was a prominent online hub for trading stolen data, hacking tools, and illicit services. Authorities say the arrested suspect was not only a technical operator but a key facilitator of cybercrime operations for nearly two decades. He also ran thesecure.biz, a private messaging service tailored for cybercriminals.
According to investigators, the suspect made more than EUR 7 million through advertising and transaction facilitation fees. Acting as a trusted third party, he helped cybercriminals conduct deals securely and even arbitrated disputes.
The investigation began in France in 2021 and moved into its operational phase in Ukraine by September 2024, with French police deployed on the ground. Europol played a central role by providing analytical support, mapping cybercriminal infrastructure, and linking the suspect to major threat actors.





