In May 2017, the Kyiv city prosecutor's office sent an indictment to the court against five individuals who, within the organized group, stole money from ATMs during 2015-2016.

Police established: during the year, attackers took about 2.5 million hryvnia. Acted normally at night. The geography of their activities has reached six cities of Ukraine - Kiev, Lviv, Pavlograd, Zhitomir, Truskavets and Lutsk.

Using keys from the service part of the ATM, one of the intruders opened the device door and downloaded malicious software (a virus) from a flash drive.. The action of the virus was aimed at uncontrolled issuance of banknotes by a banking device. Having received the money, the attackers left the scene of the crime. At the same time, the virus disconnected the ATM from the bank's system, so the shortage of funds was manifested only in the course of encashment.

At the place of residence of participants in an organized criminal group, police conducted a series of authorized searches. Employees of the Department of Cyber ??Police found evidence of involvement of the criminal group in the numerous thefts. In addition, operatives during the searches found two real ATMs on which the attackers were trained and tested viruses.

According to the results of the pre-trial investigation, malefactors are incriminated with illegal interference in the operation of electronic computers (computers), automated systems, computer networks, forgery of documents and thefts in especially large amounts, organized by a group. They face up to 12 years of imprisonment with confiscation of property.