Indictment: Russian hackers targeted regional schools, business

YOUNGSTOWN, Ohio (WKBN) - - Several individuals have been prosecuted across three federal jurisdictions for cybercrimes including foreign nationals who targeted some regional entities.

A federal grand jury in the Northern District of Ohio returned an indictment charging nine people, all Russian nationals, with conspiring to utilize the Trickbot malware to take cash and personal and personal details from victims, including schools, businesses, banks and other entities in the U.S. and around the globe, starting in November 2015.

The case was submitted in federal court in Youngstown due to the fact that there are regional victims, including a public school district in Avon and a real estate firm in North Canton, according to the indictment. A public school district in Akron whose computer systems were also contaminated is likewise listed as a complying witness in the case.

District attorneys declare the group attempted or wired to wire more than $1.1 million from the Avon school district and nearly $770,000 from the real estate company. The infections occurred in between October 2017 and May 2019, according to the indictment.

The offenders are:

• Maksim Galochkin, aka Bentley




Maksim Rudenskiy, aka Buza




Mikhail Mikhailovich Tsarev, aka Mango




Andrey Yuryevich Zhuykov, aka Defender




Dmitry Putilin, aka Grad and Staff




Sergey Loguntsov, aka Begemot




Zulas; Max Mikhaylov, aka Baget




Valentin Karyagin, aka Globus



• Maksim Khaliullin, aka Maxfax, Maxhax and Kagas

Organizations and other entities were targeted utilizing "satire" websites and "Trickbots," according to the indictment.

" The Justice Department has actually taken action versus individuals we declare developed and deployed a harmful malware plan utilized in cyberattacks on American school districts, local governments, and banks," stated Attorney General Merrick B. Garland. "Separately, we have likewise acted against individuals we allege are behind among the most prolific ransomware variants used in cyberattacks throughout the United States, consisting of attacks on regional cops departments and emergency situation medical services."

Guy jailed after cutting off his ankle screen at an Ashtabula Ace Hardware

Trickbot malware was taken down in 2022, however while active, it acted as a preliminary pathway into victim computer systems, and was utilized to support different ransomware variations, consisting of "Conti.".

" Conti" was a ransomware variation used to attack more than 900 victims worldwide, consisting of victims in roughly 47 states, the District of Columbia, Puerto Rico, and roughly 31 foreign countries.

According to the FBI, in 2021, Conti ransomware was used to assault more vital infrastructure victims than any other ransomware version.

Indictments were likewise submitted in the Middle District of Tennessee and the Southern District of California.