To you parcel: As Russians steal money from Ukrainian refugee cards
" The police officer sympathetically asked if the attack with the war in Ukraine and asked to send all the details to the Email. The cryptocurrency answered typical messages, and the bank's employees hinted at breach of the contract by the client (in this case, the bank did not indemnify anything). However, judging by the contract, the client is always guilty of evil on his side.
It is enough not to update the browser, use Wi-Fi in a cafe, click on an unverified link, install the application not from the official store or not follow "other security measures for devices". The Ukrainian phone number was received by SMS with information that she was going to be the parcel. The SMS has a Canadian mail logo and a link to the site to select a convenient delivery and tracking date.
After moving to the phone link, Purolator was installed (the name of the delivery service operating on the Canada Post). The Ukrainian woman has not suspected at night, capable of at least reading confirmation codes from mail and SMS, gave criminals access to a bank account. This story could be finished. They did not click there, the measures did not follow. People are staffing - banks are spreading their hands. However, this time everything turned out a little different.
I managed to find out that the abduction of money is a group of Russians and the "drop" hired by them, a Ukrainian by citizenship, from the Dnieper and even to communicate with them. "We make money from the air to let them into the wind,"-says a deep-thinking "status" of one of the accomplices registered at the Russian Internet Shakhrai Forum. I drew attention to the name of the account owner to which the money was sent - Mykyta Cherniienko. The Ukrainian name is not so common.
0 coincidence in the same telephone base of Kiev, 5 - in the Dnieper base. Walking this name, I found a resume of Nikita Chernienko in Germany. The student of the Dnipro College of Railway Transport and Transport Infrastructure (DKZTTI) in February lived in Neubrandenburg (a small city, up to 60,000 inhabitants), was ready to move to Berlin and was entitled to reside in Germany for two years.
By age and general appearance of a summary with an interesting phrase "ready for any work within the intelligent, of course", the man approached the type of "drops"-people who are hired to be intermediaries during the theft of money from bank cards. Per percentage or fixed one -time payment. I have the experience of educational work with fraudsters: "drops", sellers of defective goods and lovers to disappear with advance and I knew what I was looking for.
I needed to confirm that Nikita was not an attacker's name, and I left a message in two groups of Ukrainians of Neibrandenburg with a request to share the contacts of the "old acquaintance". At this time in Germany it was 3 o'clock in the morning, but a guy immediately answered me. I offered him a job and he called himself Nikita Chernienko. After a while, the guy confessed that he opened an account with the Qonto bank for a fixed amount for others.
He understood what was being said, though I asked about Olinda zweigniederlassung deutSchla. The difference is approximately as between monobank and Universal Bank. Qonto is a brand, Olinda Zweigniederlassung Deutschla - the official name of the institution in Germany. Nikita Chernienko apologized for his situation and promised to contact the bank to cancel the transaction. This, however, did not happen.
Nikita Chernienko soon cut off communication, and instead it was contacted by his potential divisors, who tried to learn about the details and understand the level of my awareness. You can read the full story on Facebook here. See here all the details, with screenshots of correspondence, additional information and links.
In addition to the unsuccessful "Drop" Nikita Chernienko, about whom I know his name, place of study, date of birth, school number and place of recent residence, I got to draw conclusions about his divisors. One, with userney @altepierde, sent me screenshots of Nikita's correspondence with a bank on Telegram, threatened, called "hoch-oh" and blocked. According to a strange coincidence, I found a person with the same userney at the Russian Forum of the Internet Shakhrai Zalenka. guru.
There, ALTEPIEERDE was distinguished by an article on how to bypass/disconnect the video userification in the Revolut Internet Bank. The other user wrote to me - Akkhesoyam. Again, according to a strange coincidence, I found a person with the same userney in the "complaints about fraudsters" in Zelenka. guru.
Communication with Nikita Chernienko and his divisors made it possible for me to make the following conclusions: seeing what resonance in social networks caused this topic, reading the comments of people who feared for their money or know someone who became the victim of such a scheme. can. The question is no longer in money. In the event of a return of stolen funds, even if they are frozen in anticipation of the internal investigation of the bank, we will transfer them to the Armed Forces.
To those who are now the most needed. I will be grateful for the spread of this small investigation in Germany, especially in Neubrandenburg, in the Dnieper, in Canada, which aims at the criminal scheme, for any attachment or contacts of those who are personally familiar with Nikita. I will be grateful for the advice of experts, thanks to you I have already drafted an action plan for the near future. If you know how to file a hosting complaint, analyze the site, app, please help.