Noida: Two foreign nationals allegedly linked to an international cybercrime network, Solar Spider, were arrested during a joint operation by teams from cyber crime and Knowledge Park police stations and cyber commandos of Meerut zone on Thursday. The accused, Modebe Joseph (42) and Sunday Okonkwo (35), both Nigerian nationals, were detained from the Knowledge Park area, for allegedly planning to siphon off crores from cooperative banks across India.DCP (cyber) Shavya Goyal, the suspects were part of a module that planned to target smaller cooperative banks with relatively weaker cyber security systems. Investigators said the group intended to exploit digital vulnerabilities to transfer between Rs 60 crore and Rs 80 crore into mule accounts and then move the money abroad through cryptocurrency channels.During interrogation, investigators found that the group had already siphoned off Rs 7 crore from a cooperative bank in Gujarat between March 7 and 8. Officials said the transactions were deliberately executed over the weekend, when banks were closed and monitoring systems were less active. The delay allowed the hackers to complete the transfers before the breach was detected.Once the fraud came to light, investigators alerted the Indian Cyber Crime Coordination Centre and banking institutions. The prompt response led to the freezing of the transferred funds and prevented further losses.Police said Solar Spider has previously been linked to cyberattacks on financial institutions in several countries. Investigators believe the network uses a sophisticated phishing technique to gain access to banking systems.In such attacks, employees receive emails disguised as legitimate alerts such as SWIFT payment notifications or MoneyGram templates. The messages carry attachments that appear to be harmless ZIP or PDF files, but actually contain hidden JavaScript code. When opened, the code installs a remote-control malware called JSOutProx, allowing hackers to access the infected computer. The malware then connects to platforms enabling downloading of additional tools, and helping the attackers bypass security filters. Once inside the network, the hackers manipulate high-value transfers, including NEFT or RTGS payments, redirecting the money into accounts controlled by the gang.Police said another member linked to the same network was arrested in Noida in 2025. Preliminary findings also suggest international links to cybercrime groups operating from Nigeria and South Africa.
