Russian hacker pleads guilty for role in massive botnet schemes

“For over two decades, Peter Levashov operated botnets which enabled him to harvest personal information from infected computers, disseminate spam, and distribute malware used to facilitate multiple scams,” Assistant Attorney General Brian Benczkowski said.

Russian national Peter Levashov pleaded guilty in a U.S. court to controlling one of the world’s largest-ever botnets, known as Kelihos. First indicted more than a decade ago under different cybercrime allegations, Levashov was known as the “Spam King” before his arrest in Spain in 2017.

Levashov’s detainment punctuated the expanding American interest in arresting indicted Russian cybercriminals when they leave their home country — which notably does not extradite its own citizens. The battle to extradite Levashov mirrored others that have taken place around the world in the last several years between Moscow and Washington.

“For over two decades, Peter Levashov operated botnets which enabled him to harvest personal information from infected computers, disseminate spam, and distribute malware used to facilitate multiple scams,” Assistant Attorney General Brian Benczkowski said in a statement Wednesday. “We are grateful to Spanish authorities for his previous arrest and extradition.”

Levashov’s network operated since 2010 and targeted Microsoft Windows machines for infection. The endgame was a tsunami of spam, password theft, the spread of malware and illegal pump-and-dump stock schemes.

The Russian was active well before Kelihos, however, and since the late 1990s he controlled various botnets as criminal moneymakers. Some of his other works include the Storm and Waledac botnets used to steal identities from victims.

“To further the scheme, Levashov disseminated spam and distributed other malware, such as banking Trojans and ransomware, and advertised the Kelihos botnet spam and malware services to others for purchase in order to enrich himself,” the Justice Department said in a statement. “Over the course of his criminal career, Levashov participated in and moderated various online criminal forums on which stolen identities and credit cards, malware and other criminal tools of cybercrime were traded and sold.”

Levashov specifically pleaded guilty to causing intentional damage to a personal computer, conspiracy, wire fraud and aggravated identity theft. Sentencing is scheduled for Sept. 6, 2019.

The Russian faces a 52-year prison sentence in the U.S. Last year, he told a Spanish court that the Americans would torture him for information because he worked for President Vladimir Putin’s United Russia party for the last decade.

“If I go to the U.S., I will die in a year. They want to get information of a military nature and about the United Russia party,” Russia’s RIA news agency reported he said. “I will be tortured, within a year I will be killed, or I will kill myself.”

The Russians dismissed the report.

You can read the criminal complaint and application for a search warrant below:
[documentcloud url=”http://www.documentcloud.org/documents/3549532-Signed-Application-for-Search-Warrant-Redacted-0.html” responsive=true sidebar=false text=false pdf=false]
[documentcloud url=”http://www.documentcloud.org/documents/3549535-Dkt-1-Complaint-0.html” responsive=true sidebar=false text=false pdf=false]

Government

• FBI officials say AI is bolstering adversaries, emphasizing need to focus on cyber basics, patching

• Feds accuse China of ‘systematic’ distillation of U.S. AI models

• CIA’s Michael Ellis says cyber intelligence is changing how the agency operates

• The G7 tells industry to hurry up and prep for post-quantum encryption

Technology

• European parliament members call for slowdown of Serbia’s EU entry over spyware use

• FCC proposes public scorecard to rate telecoms on anti-robocall efforts

• Pegasus, NoviSpy variant spyware found on devices of Serbian activists

• Wyden seeks upgraded NSA security guidance on commercial VPN use

Threats

• Chinese espionage groups swarm to exploit triple-link chain of zero-days

• Microsoft discloses two actively exploited zero-days among 974 vulnerabilities

• Attackers exploit zero-days in consistently besieged SonicWall product

• Jail time for Maine child in 764 marks turning point in federal law enforcement

Policy

• Whistleblower says USPS deploying new, ‘untested’ IT systems governing mail-in ballots

• ‘Watershed 250’ test program in Texas looks to private sector for water cybersecurity help

• Former sexual abuse victims say Grok used their images, videos to train deepfake capabilities

• Cyber threats nudge Trump to sign executive order on foreign equipment in U.S. energy infrastructure