Top Highlights
- A Russian national, Ilya Angelov, was sentenced to two years in prison and fined $100,000 for managing a botnet used in U.S. ransomware attacks from 2017-2021.
- Angelov’s group, TA551, built and monetized a botnet by distributing malware via spam emails, enabling access resale for ransomware extortion efforts.
- The group facilitated infections in over 72 U.S. companies, generating more than $14.17 million in extortion payments, and partnered with other malware operators like IcedID.
- Cybercriminals using TA551 targeted U.S. entities with sophisticated tactics, including malware and phishing campaigns, illustrating ongoing threats from foreign-based cybercrime groups.
Russian Hacker Sentenced to Prison for Ransomware Attacks
A Russian man has received a two-year prison sentence for managing a large network of infected computers. This network, called a botnet, was used to carry out ransomware attacks on U.S. businesses. The U.S. Department of Justice confirmed his arrest and sentencing. The man, aged 40, operated under the online names “milan” and “okart.” He co-led a criminal group known as TA551 from 2017 to 2021. This group built their botnet by spreading malware through spam emails. They then sold access to compromised computers, making money from other cybercriminals. This process caused significant damage, including millions of dollars in extortion payments, and affected many U.S. companies.
Impact and Broader Cybersecurity Concerns
TA551 supplied access to its botnet for various ransomware groups, such as BitPaymer and IcedID. Between 2018 and 2020, these groups used the network to attack over 70 U.S. firms. The attacks involved installing malicious software to lock up company data and demand ransom payments. Law enforcement reports show that the criminal group’s tools included phishing emails and malware that bypassed security defenses. Besides, TA551 worked with other ransomware gangs, sharing access and resources. This collaboration increased the threat level, illustrating how cybercriminal groups operate like a global network. As cyber threats grow more advanced, law enforcement continues to track and dismantle these harmful operations, emphasizing the ongoing need for strong cybersecurity measures.
Stay Ahead with the Latest Tech Trends
Learn how the Internet of Things (IoT) is transforming everyday life.
Discover archived knowledge and digital history on the Internet Archive.
DataProtection-V1
