Serbian police have arrested three men in connection with the INF Group, a cybercrime group that targeted institutions across the region, including the Croatian justice system.
The arrests were made in Belgrade, where N. M. S. (22) from Belgrade, L. D. (23) from Zaječar, and a 17-year-old from Belgrade were taken into custody. The operation was the result of an intensive investigation into cybercrime with regional implications.
The group was active across several countries, with their activities including attacks on state institutions, large corporations, and other organisations. Infrastructure was used to compromise and encrypt the systems of targeted organisations, with attackers stealing large volumes of data, including personal and sensitive data of citizens. In exchange for the return of data, victims were demanded to pay in cryptocurrency.
Among the victims were public institutions such as the Serbian Health Insurance Fund, the database of public bailiffs, and the Directorate for Foreigners. A breach in the Croatian justice system was also noted, indicating the transnational nature of these attacks. Police found equipment used in the execution of the attacks during searches of apartments and business premises, which served as key evidence in the case.
Given that the operation spanned multiple countries, including Serbia, Croatia, and other neighbouring states, international cooperation was key to dismantling this criminal network. The operation demonstrated the ability of local authorities to effectively respond to cyber threats that pose a threat to the security of citizens and institutions.
