Feds Charge 16 Russians Allegedly Tied to Botnets Used in Ransomware, Cyberattacks, and Spying

Hacker ecosystem In Russia, perhaps more than anywhere else in the world, Long lines blink Cyber ​​crime, state-sponsored cyberwarfare and espionage. Now a Complaint A group of Russian citizens and their broad Botnets give a clear example of how a single malware operation on Techtown, giving hacking operations a variety of hacking operations, Ukraine’s wartime cyberpets and spying against foreign governments.

The US Judicial Department today announced a criminal allegation against the law enforcement authority that a malware is known as Danabot, which is according to a Complaint Infected at least 300,000 machines around the world. The DOJ announcement of these allegations is described as “Russia-based”, and two of the suspects have named Alexander Stepanov and Artem Alexandrovich Kalinkin as a resident of Novosibirk in Russia. Five more suspects have been named in the charges, and the other nine have been identified only by their pseudonym. In addition to the allegations, the judiciary states that the Defense Criminal Investigation Service (DCIS) – a criminal investigating force of the Defense Department – was accused of adopting Danabot infrastructure around the world, including the United States.

In addition to complaining how the wingbot was used in criminal criminal hacking, the complaint also made a rare claim-it describes the second variant of the malware that said that the military, government and NGOs were used in spying against targets. The US Attorney Bill Essile wrote in a statement, “Malware like Danabot damages thousands of victims around the world, including sensitive military, diplomatic and government entities, and lose millions of dollars.”

Since 2018, Danabot – Criminal complaints as “incredibly aggressive malware” – millions of computers around the world have been infected, primarily designed to steal credit cards and cryptocurrency stealing directly from the owners of that PC. Because its manufacturers have sold it to an “approved” model that makes other hacker groups available at $ 3,000 to $ 4,000 a month, but soon it was used as a tool to install a variety of malware in a wide range of operations with ransomweware. Its goals also spread faster from the initial victims in Ukraine, Poland, Italy, Germany, Austria and Australia, according to one, according to one Analysis of Operation by Cybercquire Firm CrowdstrickeThe

At one point in 2021, according to Crowdstrick, Danabot was used in a software supply-chain attack that hid the malware in a JavaScript coding equipment called NPM with millions of weekly downloads. Croudstrike found the victims of those compromised equipment throughout financial services, transport, technology and media industry.

According to researcher Selina Larson, a threat to the cybercuity firm Proofpoint staff, Danabot was created “e-crime landscape” as a result of this scale and its various criminal use.

More uniquely, however, Danabot was also used to promote hacking, which seems to be associated with the interests of the state-sponsored or the interests of Russia’s government agencies. In 2019 and 2020, it was used to target a handful of Western government officials in the apparent spy campaign, according to the DOJ complaint. Accordingly ProofpointIn these instances the malware was supplied to phishing messages that disguised the organization and the Kazakhstan government entity organization for protection and cooperation in Europe.