Yuriy Rybtsov, a Ukrainian hacker known as "MrICQ," was arrested in Italy and extradited to the U.S. for his role in the Jabber Zeus cybercrime group. The gang stole millions from businesses using a customized ZeuS trojan that intercepted banking credentials and facilitated money laundering through recruited mules. Rybtsov's arrest follows a long investigation into the group's operations and their notorious methods.

Dutch authorities arrested a 33-year-old man at Schiphol Airport, believed to be the mastermind behind the AVCheck malware platform. This site, shut down in May 2025, allowed cybercriminals to test their malware against various antivirus systems. The arrest followed an international investigation linked to the platform's takedown.

U.S. authorities have charged Ukrainian national Volodymyr Viktorovich Tymoshchuk for his involvement in managing the LockerGoga, MegaCortex, and Nefilim ransomware operations, which targeted over 250 companies globally, causing significant financial damage. Tymoshchuk faces multiple charges including conspiracy for computer fraud and unauthorized access, while a reward of up to $11 million is offered for information leading to his arrest.

Ethan J. Foltz, a 22-year-old from Oregon, has been arrested for allegedly operating "Rapper Bot," a large botnet used for launching DDoS attacks, including a significant attack that disrupted Twitter/X in March 2025. Federal investigators tracked Foltz's activities through financial records and chat logs, revealing that he and a co-conspirator extorted online businesses using the botnet's capabilities, which could generate massive amounts of junk data per second. Foltz now faces criminal charges that could lead to a maximum of 10 years in prison if convicted.

Daniil Kasatkin, a promising Russian basketball player, was arrested in connection with a ransomware attack targeting the basketball community. His involvement in the crime has raised significant concerns about the impact of cybercrime in sports and the integrity of the game.