JPMorgan hacker heads to U.S. court after leaving Moscow

One of the FBI’s most wanted hackers, a man responsible for stealing the personal records of more than 83 million JP Morgan customers, was arrested in New York Wednesday.

One of the FBI’s most wanted hackers, a man responsible for stealing the personal records of more than 83 million JP Morgan Chase customers, was arrested in New York Wednesday.

Shortly after being charged with multiple counts of violating the Computer Fraud and Abuse Act, 32-year-old Maryland native Joshua Aaron fled to Russia. On Wednesday, he was taken into custody upon arriving from Moscow at New York’s John F. Kennedy International Airport.

Aaron, along with co-conspirators Gery Shalon and Ziv Orenstein, are accused of breaching several major U.S. companies — including Fidelity Investments Ltd., E*Trade Financial Corp., Scottrade Financial Services Inc. and Dow Jones & Co. — and stealing personal information. According to prosecutors, the trio oversaw a vast money laundering scheme, processed payment information for fake antivirus software, created fake passports and at one point in time compromised a New Jersey-based credit union.

Aaron’s return to the U.S., Bloomberg reports, citing unnamed officials, follows months of negotiations between federal authorities and a Russian migrant detention center. Ben Brafman, Aaron’s lawyer, has a different story: His client waived extradition and returned voluntarily. Aaron pleaded not guilty to 16 criminal counts, including hacking, securities fraud and conspiracy to commit a crime. 

“Aaron allegedly worked to hack into the networks of dozens of American companies, ultimately leading to the largest theft of personal information from US financial institutions ever,” Manhattan US Attorney Preet Bharara said in a statement. “For pursuing what we have called ‘hacking as a business model,’ and thanks to the efforts of the FBI and the US Secret Service, Aaron will now join his co-defendants to face justice in a Manhattan federal courtroom.”

The arrest of Aaron comes at time when the FBI and the Department of Justice are making strides in prosecuting computer crime through international law enforcement partnerships.

Government

• FBI officials say AI is bolstering adversaries, emphasizing need to focus on cyber basics, patching

• Feds accuse China of ‘systematic’ distillation of U.S. AI models

• CIA’s Michael Ellis says cyber intelligence is changing how the agency operates

• The G7 tells industry to hurry up and prep for post-quantum encryption

Technology

• European parliament members call for slowdown of Serbia’s EU entry over spyware use

• FCC proposes public scorecard to rate telecoms on anti-robocall efforts

• Pegasus, NoviSpy variant spyware found on devices of Serbian activists

• Wyden seeks upgraded NSA security guidance on commercial VPN use

Threats

• Chinese espionage groups swarm to exploit triple-link chain of zero-days

• Microsoft discloses two actively exploited zero-days among 974 vulnerabilities

• Attackers exploit zero-days in consistently besieged SonicWall product

• Jail time for Maine child in 764 marks turning point in federal law enforcement

Policy

• Whistleblower says USPS deploying new, ‘untested’ IT systems governing mail-in ballots

• ‘Watershed 250’ test program in Texas looks to private sector for water cybersecurity help

• Former sexual abuse victims say Grok used their images, videos to train deepfake capabilities

• Cyber threats nudge Trump to sign executive order on foreign equipment in U.S. energy infrastructure