Skip to content

Key XSS.is Admin 'Toha' Arrested in Major Blow to Cybercrime

After a four-year investigation, 'toha', the alleged administrator of XSS.is, is arrested. The closure of this major cybercrime hub could have a substantial impact on the criminal underworld.

In this image, we can see an advertisement contains robots and some text.
In this image, we can see an advertisement contains robots and some text.

Key XSS.is Admin 'Toha' Arrested in Major Blow to Cybercrime

French, Ukrainian, and Europol authorities have arrested a key figure in the cybercrime underworld. The suspect, known as 'toha', is believed to be the central administrator of XSS.is, a major hub for trading stolen data and malicious tools. The arrest took place in Kyiv, Ukraine, in late July 2025.

XSS.is has been operating for nearly two decades, amassing over 50,000 users. It serves as a marketplace for stolen data, malware, zero-day exploits, and hacking tools. The arrested admin, 'toha', is suspected of earning over €7 million from his activity on the platform. He also ran thesecure.biz, a private messaging service used by criminals.

The investigation, launched by French police in 2021 with support from Europol, culminated in the arrest. Europol played a crucial role in coordinating efforts, analyzing data, and linking the suspect to major cybercriminals. The arrest is a significant blow to the cybercrime community, as XSS.is is considered one of the world's most significant cybercrime platforms.

The arrest of 'toha' highlights the international cooperation among law enforcement agencies in combating cybercrime. With the alleged administrator of XSS.is in custody, authorities aim to disrupt the platform's operations and bring its users to justice. The investigation continues to uncover the full extent of the network's activity and the impact of its closure on the cybercrime landscape.

Read also:

Latest