US indicts Russian accused of ransomware attacks
FILE PHOTO: A hand is seen on a laptop with binary code displayed on the screen in front of a Russian flag in this picture illustration created on August 19, 2022. REUTERS/Dado Ruvic/Illustration/File Photo
(Reuters) -The U.S. Department of Justice on Thursday unsealed charges against a Russian national accused of leading the development and deployment of malicious software that infected thousands of computers over more than a decade.
Rustam Rafailevich Gallyamov, 48, of Moscow, led a group of cybercriminals who developed and deployed Qakbot, a name for software that could be used to infect computers with additional malware, such as ransomware, as well as to conscript the computer into a botnet - or group of compromised computers and devices controlled remotely - to be used for additional malicious purposes, according to a DOJ statement.
Prosecutors also made public a complaint seeking the forfeiture of more than $24 million in cryptocurrency and traditional funds seized over the course of the investigation, the DOJ said.
The charges of conspiracy and conspiracy to commit wire fraud come a year and a half after an international law enforcement operation disrupted Qakbot infrastructure. Gallyamov continued cybercriminal activities after the disruption, prosecutors said, as recently as January 2025.
Gallyamov did not immediately respond to a request for comment. The DOJ statement did not indicate his whereabouts.
Also on Thursday, federal prosecutors in Los Angeles unsealed charges against 16 people accused of developing and deploying the DanaBot malware, which was used to infect more than 300,000 computers worldwide and cause at least $50 million in damage, according to a DOJ statement.
The DanaBot charges are part of Operation Endgame, an international law enforcement and private-sector campaign targeting cybercriminal operators and infrastructure around the world.
DanaBot emerged in 2018 as malware to steal banking credentials and other information, but evolved to enable wider information stealing and establish access for follow-on activity, according to researchers with Lumen's Black Lotus Labs, who participated in Operation Endgame.
DanaBot remained 'highly operational through 2025,' the researchers wrote in a blog post, with roughly 1,000 daily victims across more than 40 countries.
(Reporting by AJ Vicens in Detroit; Additional reporting by Anton Zverev in London; Editing by Matthew Lewis)
Try Our AI Features
Explore what Daily8 AI can do for you:
Comments
No comments yet...
Related Articles
The Star
2 hours ago
- The Star
Protesters rally against immigration agents for second day in Los Angeles
LOS ANGELES (Reuters) -Federal agents in Los Angeles faced off against demonstrators for a second day in a row on Saturday following immigration raids a day earlier, prompting a senior White House official to call the protests a "violent insurrection." The security agents on Saturday were in a tense confrontation with protesters in the Paramount area in southeast Los Angeles, where some demonstrators displayed Mexican flags and others covered their mouths with respiratory masks. Live video footage showed dozens of green-uniformed security personnel with gas masks lined up on a road strewn with overturned shopping carts as small canisters exploded into gas clouds. "Now they know that they cannot go to anywhere in this country where our people are, and try to kidnap our workers, our people -- they cannot do that without an organized and fierce resistance," said protester Ron Gochez, 44. Kristi Noem, the head of the Department of Homeland Security, said on X: "A message to the LA rioters: you will not stop us or slow us down." Trump's border czar Tom Homan said on Fox News that the National Guard would be deployed in Los Angeles on Saturday evening. A first round of protests kicked off on Friday night after Immigration and Customs Enforcement agents conducted enforcement operations in the city and arrested at least 44 people on alleged immigration violations. The Department of Homeland Security said in a statement that "1,000 rioters surrounded a federal law enforcement building and assaulted ICE law enforcement officers, slashed tires, defaced buildings, and taxpayer funded property." Reuters was unable to verify DHS's accounts. Angelica Salas, executive director of immigrants rights organization Chirla, said lawyers had not had access to those detained on Friday, which she called "very worrying." Stephen Miller, an immigration hardliner and the White House deputy chief of staff, wrote on X that Friday's demonstrations were "an insurrection against the laws and sovereignty of the United States." On Saturday, he described the day's protests as a "violent insurrection." The protests pit Democratic-run Los Angeles, where census data suggests a significant portion of the population is Hispanic and foreign-born, against Trump's Republican White House, which has made cracking down on immigration a hallmark of his second term. Trump has pledged to deport record numbers of people in the country illegally and lock down the U.S.-Mexico border, with the White House setting a goal for ICE to arrest at least 3,000 migrants per day. But the sweeping immigration crackdown has also caught up people legally residing in the country, including some with permanent residence, and has led to legal challenges. In a statement on Saturday about the protests in Paramount, the Los Angeles County Sheriff's Office said: "It appeared that federal law enforcement officers were in the area, and that members of the public were gathering to protest." Salas of Chirla said protesters gathered after an ICE contingent appeared to be using parking lots near a Paramount Home Depot store as a base. ICE, the Department of Homeland Security, and the Los Angeles Police Department did not respond to a request for comment on the protests or potential immigration sweeps on Saturday. POLITICAL DIVISIONS OVER FRIDAY'S SWEEP Television news footage on Friday showed unmarked vehicles resembling military transport and vans loaded with uniformed federal agents streaming through Los Angeles streets as part of the immigration enforcement operation. Raids occurred around Home Depots, where street vendors and day laborers were picked up, as well as at a garment factory and a warehouse, Salas of Chirla said. The Democratic mayor of Los Angeles, Karen Bass, in a statement condemned the immigration raids. "I am deeply angered by what has taken place," Bass said. "These tactics sow terror in our communities and disrupt basic principles of safety in our city. We will not stand for this." The LAPD did not take part in the immigration enforcement. It was deployed to quell civil unrest after crowds protesting the deportation raids spray-painted anti-ICE slogans on the walls of a federal court building and gathered outside a nearby jail where some of the detainees were reportedly being held. In a statement, DHS criticized Democratic politicians including Mayor Bass, saying their anti-ICE rhetoric was contributing to violence against immigration agents. "From comparisons to the modern-day Nazi gestapo to glorifying rioters, the violent rhetoric of these sanctuary politicians is beyond the pale. This violence against ICE must end," said DHS Assistant Secretary Tricia McLaughlin. (Additional reporting by Lucia Mutikani, Alexandra Ulmer, Michael Martina; Writing by Alexandra Ulmer and Lucia Mutikani; Editing by Diane Craft and Deepa Babington)
The Sun
11 hours ago
- The Sun
Putin signs bill ratifying Russia-Seychelles treaty on mutual assistance in criminal cases
MOSCOW: Russian President Vladimir Putin has signed a Bill that ratifies the treaty between Russia and the Republic of Seychelles on mutual legal assistance in criminal matters, the Kremlin said on Saturday, according to Ria Novosti. 'The president signed the federal law on 'Ratification of the Treaty between the Russian Federation and the Republic of Seychelles on mutual legal assistance in criminal matters',' the Kremlin said. According to the text of the treaty, published by the Russian Foreign Ministry, legal assistance is provided 'if the offence, in connection with which the request was issued, is criminally punishable according to the law of both Parties'. At the same time, a side of the treaty may provide legal assistance 'upon its own consideration' even if the situation is not recognised by its legislation as a criminal matter. The treaty also notes that legal assistance may also be provided in connection with investigations, prosecutions or judicial proceedings in relation to financial and customs offences. Legal assistance includes procedures such as delivery of documents relevant to the criminal case; obtaining evidence; locating and identifying persons and objects; summoning witnesses, victims, experts and other persons to appear voluntarily before the competent authority of the requesting party.
The Sun
11 hours ago
- The Sun
Putin ratifies Russia-Seychelles legal aid treaty
MOSCOW: Russian President Vladimir Putin has signed a Bill that ratifies the treaty between Russia and the Republic of Seychelles on mutual legal assistance in criminal matters, the Kremlin said on Saturday, according to Ria Novosti. 'The president signed the federal law on 'Ratification of the Treaty between the Russian Federation and the Republic of Seychelles on mutual legal assistance in criminal matters',' the Kremlin said. According to the text of the treaty, published by the Russian Foreign Ministry, legal assistance is provided 'if the offence, in connection with which the request was issued, is criminally punishable according to the law of both Parties'. At the same time, a side of the treaty may provide legal assistance 'upon its own consideration' even if the situation is not recognised by its legislation as a criminal matter. The treaty also notes that legal assistance may also be provided in connection with investigations, prosecutions or judicial proceedings in relation to financial and customs offences. Legal assistance includes procedures such as delivery of documents relevant to the criminal case; obtaining evidence; locating and identifying persons and objects; summoning witnesses, victims, experts and other persons to appear voluntarily before the competent authority of the requesting party.
