Guilty plea for Canadian charged in 2014 Yahoo hacking case

Karim Baratov, a 22-year-old Kazakhstan-born Canadian citizen, was arrested in Toronto in March before waiving his right to fight extradition to the U.S. earlier this year.

A man pleaded guilty in federal court in San Francisco on Tuesday for his role in helping Russian spies hack into email accounts.

Karim Baratov, a 22-year-old Kazakhstan-born Canadian citizen, was arrested in Toronto in March before waiving his right to fight extradition to the U.S. earlier this year. Baratov is charged, along with three other men including two intelligence agents from Russia’s Federal Security Service (FSB), for a role in the 2014 data breach where information tied to 500 million Yahoo accounts was stolen.

Baratov pleaded guilty to eight criminal counts including conspiracy to commit computer fraud and abuse and aggravated identity theft.

American prosecutors say Baratov worked under the order and pay of the FSB officers Dmitry Dokuchaev and Igor Sushchin. When FSB targets had non-Yahoo emails, the agency allegedly paid Baratov to break into at least 80 accounts. At least 50 of the targets Baratov allegedly hacked used Gmail.

The defendant’s lawyers said that, at the time of the crime, Baratov had no idea he was working with FSB agents.

Prosecutors recommended for 70 to 87 months in jail for the first charge and 24 months for the identity theft charges. A sentencing hearing will be held on Feb. 20, 2018.

Baratov’s capture is the only arrest resulting from this investigation. The three other men charged all currently reside in Russia. No extradition agreement exists between the United States and Russia, meaning the charges will likely not result in any prosecution unless the men are caught outside of Russia.

Other alleged Russian hackers have been caught across Europe in exactly that way.

Government

• FBI officials say AI is bolstering adversaries, emphasizing need to focus on cyber basics, patching

• Feds accuse China of ‘systematic’ distillation of U.S. AI models

• CIA’s Michael Ellis says cyber intelligence is changing how the agency operates

• The G7 tells industry to hurry up and prep for post-quantum encryption

Technology

• European parliament members call for slowdown of Serbia’s EU entry over spyware use

• FCC proposes public scorecard to rate telecoms on anti-robocall efforts

• Pegasus, NoviSpy variant spyware found on devices of Serbian activists

• Wyden seeks upgraded NSA security guidance on commercial VPN use

Threats

• Chinese espionage groups swarm to exploit triple-link chain of zero-days

• Microsoft discloses two actively exploited zero-days among 974 vulnerabilities

• Attackers exploit zero-days in consistently besieged SonicWall product

• Jail time for Maine child in 764 marks turning point in federal law enforcement

Policy

• Whistleblower says USPS deploying new, ‘untested’ IT systems governing mail-in ballots

• ‘Watershed 250’ test program in Texas looks to private sector for water cybersecurity help

• Former sexual abuse victims say Grok used their images, videos to train deepfake capabilities

• Cyber threats nudge Trump to sign executive order on foreign equipment in U.S. energy infrastructure