Home » » The Jakarta Metropolitan Police is currently investigating the identity of a man who claims to be Bjorka

The Jakarta Metropolitan Police is currently investigating the identity of a man who claims to be Bjorka



The Jakarta Metropolitan Police (Polda Metro Jaya) is still investigating the identity of a man who claims to be the hacker known as Bjorka. The account holder X Bjorka, WFT, 22 years old, was arrested by the police for alleged illegal access and data manipulation crimes. The Cyber Crime Directorate of the Jakarta Metropolitan Police is currently conducting a detailed investigation into WFT's identity. "Further investigations are still ongoing regarding the similarities in names," said Head of Public Relations at the Jakarta Metropolitan Police, Brigadier General Ade Ary Syam Indradi, to reporters at the Jakarta Metropolitan Police Headquarters in South Jakarta on Friday, October 3, 2025.

Ade Ary stated that the investigators are committed to pursuing this case and protecting the public. He also urged the public to safeguard their personal data. "We caution the public to be careful about sharing personal information with unknown parties," he said.

WFT, who claimed to be the owner of the X Bjorka account with the username @bjorkanesiaaa, has allegedly hacked into 4.9 million customer data from a private bank. His intention was to extort money from the bank. "The suspect contacted the bank through direct messages and claimed that the X account under the name Bjorka with the username @bjorkanesiaaa had access to 4.9 million customer databases," said Head of Public Information Sub-Division of the Jakarta Metropolitan Police, Chief Commissioner Reonald Simanjuntak, during a press conference at the Jakarta Metropolitan Police Headquarters on Thursday, October 2, 2025.

The bank reported the extortion threat to the Jakarta Metropolitan Police in February 2025. After six months of searching, WFT was arrested at his residence in Minahasa, North Sulawesi. Police seized several digital evidence, including computers and mobile phones used by WFT, as well as various customer account displays of a private bank that WFT used for extortion.

According to Herman, the bank that was extorted by WFT did not send the requested amount of money. "His motive for extortion was economic. So, it was all about money," he said. Deputy Director of Cyber Crime Directorate of the Jakarta Metropolitan Police, Chief Commissioner Fian Yunus, mentioned that WFT has been active on social media claiming to be Bjorka since 2020.

However, Fian could not confirm whether WFT is indeed the Bjorka figure who leaked 1.3 billion SIM card data, IndiHome user data, General Election Commission data, and document transaction data that have been circulating since 2022. "Anyone can be anyone on the Internet. We need to conduct further investigation regarding the evidence we have found so we can formulate the truth," he said.

Doubt about WFT's Identity

Teguh Aprianto, the founder of Ethical Hacker Indonesia, doubts whether the man with the initials WFT who was arrested is actually the notorious hacker Bjorka. The cybersecurity expert believes that WFT is not the real Bjorka who became famous a few years ago. Through his X account @secgron, Teguh suspects that WFT is just someone claiming to be Bjorka and enjoys reposting other people's threads on X. "If you watched the police's complete explanation in yesterday's press conference, the reference they used for the arrest was DarkForums (platform) with the nickname Skywave," he said when contacted on Friday, October 3, 2025.

Based on Teguh's investigation, the SkyWave account has a history of using other people's nicknames to make false claims, including posing as Bjorka. He provided evidence of a post from the @bjorkanesiaaa account on February 5, 2025, claiming that Bank BSI and BCA were targeted by a ransomware group and possibly all banks in Indonesia. Later, Teguh explained that the SkyWave account reposted a threat post by someone named Black, who claimed to have a lot of BCA account data. However, the user data did not come directly from BCA but from users' devices that were victims of stealers or malware to steal account information such as usernames, passwords, and cookies. "He reposted Black's threat thread from BreachForums to DarkForums using the name SkyWave with the same data," he added.

0 comments:

Posting Komentar