Cybercrime Kingpin “Toha” Toppled: XSS.IS Admin Arrested in Ukraine Bust
French authorities, with a little help from their Ukrainian and Europol friends, have nabbed the alleged admin of the notorious cybercrime forum xss.is in Kyiv. Known as “toha,” this suspected tech whiz wasn’t just fixing bugs but also fixing deals, earning a cool €7 million by playing cybercrime referee.

Hot Take:
Move over, Bond villains. There’s a new mastermind in town, and he’s trading in gadgets for gigabytes! The arrest of the xss.is admin is like catching the cyber equivalent of a rare Pokémon. Just when you thought the drama was limited to spy movies, in comes Europol, swinging like a digital Batman, to remind everyone that cybercrime doesn’t pay… well, unless you count the €7 million stash, but karma’s got a way of catching up!
Key Points:
- French and Ukrainian authorities, with Europol, arrested an alleged admin of the xss.is cybercrime forum.
- The suspect, known as “toha,” was nabbed in Kyiv and is linked to major cybercriminal activities.
- xss.is forum, a hub for over 50,000 users, traded stolen data, malware, and hacking tools.
- The suspect allegedly earned over €7 million from his activities, including running a private messaging platform for criminals.
- The investigation began in 2021 and culminated with the arrest in July 2025, showcasing international cooperation against cybercrime.
Already a member? Log in here