Polish authorities have arrested four (4) members of an organized cybercrime group accused of breaching telecom partners and hijacking email accounts to conduct SIM-swapping attacks. Working with the FBI and US Homeland Security Investigations, the Polish Cybercrime Bureau (CBZC) says the group used specialized software and social engineering to gain unauthorized access to infrastructure supporting mobile operators and employee email accounts. They then illegally cloned victims’ phone numbers, intercepted SMS messages and emails, and took over accounts at cryptocurrency exchanges, stealing and laundering funds through multiple bank accounts and digital wallets. Losses are estimated at several tens of millions of Polish złoty (at least $5 million). The suspects, now in pre-trial detention, face charges including participation in an organized criminal group, hacking to commit theft, and money laundering, with a maximum penalty of twenty-five (25) years in prison. Blockchain investigator ZachXBT identified one (1) of the arrested as Wojtek Kulisz, aka “Merry.”