French authorities have confirmed the arrest of a suspected administrator of XSS.is, one of the longest-running Russian-language cybercrime forums on the dark web. The arrest was carried out in Ukraine on July 22, 2025, through a coordinated international operation involving French law enforcement, Ukrainian authorities, and Europol.
A Major Blow to a Notorious Cybercrime Hub
Launched in 2013, XSS.is has served as a central marketplace for a wide range of illicit cyber activities. Criminals frequented the forum to exchange malware, purchase and sell stolen credentials, coordinate ransomware deployments, and buy unauthorized access to compromised computer systems. The platform also operated an encrypted Jabber messaging server, providing cybercriminals with secure communication channels away from law enforcement oversight.
According to the French Public Prosecutor’s Office in Paris, the arrest represents a significant breakthrough in an investigation that began in July 2021. By November that year, the probe was formally assigned to investigative magistrates for further judicial inquiry. Authorities suspect the individual played a key role in facilitating and profiting from widespread cyberattacks targeting systems across multiple countries.
An Extensive International Investigation
The joint investigation uncovered substantial evidence suggesting the forum’s operators reaped illicit profits exceeding $7 million through organized cybercrime activities. Law enforcement agencies monitored encrypted communications and analyzed digital infrastructure linked to the forum’s operations.
French prosecutors announced that the suspect is being investigated for “complicity in attacks on automated data processing systems,” “organized extortion,” and “criminal conspiracy,” charges that reflect the scale and coordination behind the activities conducted via XSS.is.
Cross-Border Cooperation Key to Success
Officials highlighted the critical role of cross-border law enforcement collaboration in managing cybercrime that transcends national jurisdictions.
“This arrest is the result of exceptional international cooperation,” said a representative from the French cybercrime unit. “It underscores our shared commitment to dismantling the digital platforms that enable large-scale cyber threats against public and private institutions alike.”
Europol also facilitated intelligence sharing and coordination between agencies, ensuring operational success across national boundaries.
A Turning Point in the Fight Against Cybercrime
The dismantling of leadership within one of the most enduring dark web cybercrime markets marks a major win for global cybersecurity efforts. As cyber threats continue to rise in frequency and sophistication, law enforcement agencies around the world are increasingly turning to joint operations to detect and disrupt criminal networks.
Further judicial proceedings are expected to follow in France, with potential extradition discussions underway.
