Polish police have arrested three Ukrainian men traveling through Europe and seized a cache of advanced hacking equipment that could target critical IT systems.
The incident unfolded on December 8, 2025, when officers from Warsaw’s Śródmieście district stopped a Toyota on Senatorska Street for a routine check.
The suspects, aged 43, 42, and 39, appeared nervous and claimed they were IT specialists “touring Europe,” heading from Poland to Lithuania.
A thorough vehicle search revealed alarming tools. Central among them was the Flipper Zero, a portable multi-tool popular among pentesters and cybercriminals.
This credit-card-sized device features RFID/NFC emulation for cloning access cards, sub-GHz radio for intercepting and replaying signals from keyless car fobs or garage doors, infrared control for TVs and AC units, and GPIO pins for hardware hacking.
Its BadUSB mode lets it pose as a keyboard to inject malicious payloads into computers. Police noted its potential to break into networks or disrupt teleinformatics systems.
Other items included a spy device detector an RF spectrum analyzer that scans for hidden bugs, cameras, or GPS trackers by identifying unauthorized transmissions up to 6GHz.
Authorities also seized antennas likely for signal jamming or amplification, capable of interfering with Wi-Fi, cellular, or even military communications.
The haul featured laptops, routers, dozens of SIM cards for anonymous VoIP or burner ops, encrypted portable hard drives, and surveillance cameras.
The Central Bureau for Combating Cybercrime (CBZC) in Warsaw examined the gear. They cracked the encrypted drives, uncovering evidence of potential cybercrimes.
Criminal investigators from the Property Crime Unit questioned the men, who grew evasive, feigning language barriers.
Prosecutors charged the trio with fraud, computer fraud, and possessing tools adapted for serious crimes like damaging data critical to Poland’s national defense.
These could include state infrastructure or defense networks. A Warsaw court approved the prosecutor’s request, ordering pre-trial detention for all three for three months.
The case remains active, with police verifying the men’s entry into Poland and travel history.
They suspect links to broader cyber threats, given Europe’s rising tensions. CBZC analysis continues, probing for ties to ransomware groups or state-sponsored actors.
“Daily patrols ensure national security,” said a police spokesperson.
This bust highlights Flipper Zero’s dual-use risks: ethical hacking versus crime. Recent EU alerts warn of its role in car thefts and ATM skimming.
Polish authorities urge vigilance against such “traveling” threats.
Follow us on Google News , LinkedIn and X to Get More Instant Updates, Set Cyberpress as a Preferred Source in Google.PortSwigger has leveled up Burp Suite's scanning arsenal with the latest Active Scan++ extension, version…
Unit 42 researchers at Palo Alto Networks exposed serious flaws in the Model Context Protocol…
Google has launched its most significant Chrome update ever, embedding Gemini AI across the browser…
Attackers exploit this vulnerability through the router's web interface components, specifically "cgibin" and "hnap_main," by…
Security researchers have uncovered a severe flaw in Apache Tika, a popular open-source toolkit for…
Attackers can keep access to AWS accounts even after admins delete compromised keys. New research…