Fifteen people have been arrested across Europe, including four in the UK, in connection to the hijacking of computers.
The hackers are alleged to have used Remote Access Trojans (RATs) to target users with older operating systems or out-of-date security software to allow them to remotely hijack their computers with an aim of stealing personal information such as bank details.
According to the National Crime Agency (NCA), victims are typically infected by being convinced to click on a link purporting to be a picture or video, or disguised as a legitimate file, but is instead an installer for the RAT. In many cases, those who unwittingly install such trojans will have no indication that their machine is infected.
If a user has been infected by a RAT, then the hackers can monitor a personas activities on the computer and even remotely switch on their webcams to monitor what they are doing via streaming video.
The NCA said it arrested two 33-year-old men, and a 30-year-old woman, in Leeds, as well as a 40-year-old woman in Darlington. A 20-year-old man in Chatham, Kent, was previously arrested on 19 November in connection with the hacking activities and a search warrant was also executed on a 19-year-old man from Liverpool, who has been brought in for voluntary questioning.
Other arrests were carried out in Estonia, France, Romania, Latvia, Italy, and Norway.
Peter Goodman, East Midlands Deputy Chief Constable and ACPO Cyber Crime lead, commented on the raids:
“Cyber criminals are using very sophisticated technology to breach online security systems and to conceal their digital tracks. However, the police forces in the UK and overseas have the expertise to identify and disrupt those who are determined to access computers in order to steal data or to commit serious offences, wherever they are in the world.
“The response on this occasion has been enforcement action through the National Crime Agency and Regional Organised Crime Units in the UK, and Europol overseas, to strike a blow against a particularly pernicious and invasive form of cyber-criminality.
“Nevertheless, there is so much the public can do to safeguard their data and to prevent falling victim to the activities of cyber criminals. The www.cyberstreetwise.com and www.getsafeoline.org websites have lots of excellent advice to help ensure that individuals and businesses can take practical, affordable steps to make their computers and devices more secure.”