A 45-year-old foreign citizen, internationally wanted for serious cybercrimes, has been apprehended in the Republic of Moldova following a coordinated operation between Moldovan and Dutch law enforcement agencies.
The suspect is believed to be responsible for multiple ransomware attacks that caused millions of euros in damages to Dutch companies.
The arrest comes as the result of a joint international operation conducted by officers from Moldova’s Center for Combating Cybercrime, the Criminal Investigation Department of the National Investigation Inspectorate (INI), prosecutors from the Prosecutor’s Office for Combating Organised Crime and Special Causes (PCCOCS), alongside law enforcement authorities from the Kingdom of the Netherlands.
The operation culminated in the suspect’s detention with support from Moldova’s Special Forces Brigade “Fulger”.
According to Moldovan authorities, the suspect was temporarily residing in Moldova when apprehended. He is accused of orchestrating several cybercrimes, including ransomware attacks, blackmail, and money laundering targeting Dutch businesses.
Most notably, investigators have linked the suspect to a devastating cyberattack on the Netherlands Organization for Scientific Research (NWO) that reportedly caused approximately €4.5 million in damages.
The 2021 attack completely disabled the agency’s grant application and review process, severely disrupting its operations.
On May 6, 2025, law enforcement officers conducted searches of the suspect’s residence and vehicle, yielding significant evidence. Authorities seized €84,800 in cash, an electronic wallet, two laptops, a mobile phone, a tablet, six bank cards, and multiple data storage devices.
The arrest highlights the growing international cooperation in combating cybercrime. Moldova has been strengthening its cybersecurity capabilities in recent years, with the Centre for Combating Cybercrime serving as the primary unit for investigating cybercrimes in the country.
“This case demonstrates the effectiveness of international police collaboration in addressing transnational cybercrime threats,” said a spokesperson for Moldova’s Ministry of Internal Affairs. “Our partnership with Dutch authorities was crucial in locating and apprehending this suspect.”
The detained individual remains in custody while Moldovan prosecutors initiate legal extradition procedures to the Netherlands, where he will face charges related to the cyberattacks.
This arrest comes amid increasing efforts across Europe to combat cybercrime. Earlier this year, Moldova and the Netherlands concluded their first bilateral Cyber Dialogue in Chisinau, focusing on strengthening cooperation in cybersecurity and addressing shared challenges in combating cybercrime.
How SOC Teams Save Time and Effort with ANY.RUN - Live webinar for SOC teams and managers