US strikes at the heart of Russian cybercrime network Void Blizzard | #cybercrime | #infosec


A 36-year-old Russian citizen, identified as Denis Obrezko, has been charged in the U.S. with participating in a cyberespionage operation linked to Kremlin interests through the cybercriminal group known as ‘Void Blizzard’.

The case, being processed in a federal court in Boston, is part of a broader investigation into digital intrusion campaigns targeting Western organizations.

Obrezko was arrested last November in Phuket (Thailand) in a joint operation between local authorities and the FBI, after his hotel room was searched and several electronic devices were seized, including laptops, mobile phones, and cryptocurrency wallets. He was subsequently extradited to the U.S., where he appeared before a judge for the first time this week.

According to the indictment, the investigated individual allegedly played a technical support role within the infrastructure used by these threat actors. His role was not to carry out the attacks directly but to facilitate part of the IT scaffolding necessary for the group to operate covertly.

U.S. authorities claim that Obrezko contributed to the acquisition and management of key digital resources, such as virtual private servers and Internet domains, using cryptocurrency transactions. These elements were allegedly used to enable intrusion campaigns against multiple international targets.

The hacker’s victims

The FBI states in an affidavit that at least 11 U.S. companies have been identified as direct victims of these operations, although investigators believe the actual scope is larger.

The affected sectors include technology companies, public agencies, defense contractors, media outlets, transportation companies, healthcare centers, and non-governmental organizations in North America and Europe.

The modus operandi attributed to Void Blizzard is based on the use of stolen or illegally acquired credentials to access corporate networks. Once inside, the attackers allegedly exfiltrated emails, internal documents, and other sensitive data for intelligence or espionage purposes.

Following his arrest, Russian diplomats visited Obrezko in prison and requested his repatriation. Additionally, Russia included him on an international wanted list, adding a geopolitical dimension to the matter, which is still developing.

A 36-year-old Russian citizen, identified as Denis Obrezko, has been charged in the U.S. with participating in a cyberespionage operation linked to Kremlin interests through the cybercriminal group known as ‘Void Blizzard’.

The case, being processed in a federal court in Boston, is part of a broader investigation into digital intrusion campaigns targeting Western organizations.

Obrezko was arrested last November in Phuket (Thailand) in a joint operation between local authorities and the FBI, after his hotel room was searched and several electronic devices were seized, including laptops, mobile phones, and cryptocurrency wallets. He was subsequently extradited to the U.S., where he appeared before a judge for the first time this week.

According to the indictment, the investigated individual allegedly played a technical support role within the infrastructure used by these threat actors. His role was not to carry out the attacks directly but to facilitate part of the IT scaffolding necessary for the group to operate covertly.

U.S. authorities claim that Obrezko contributed to the acquisition and management of key digital resources, such as virtual private servers and Internet domains, using cryptocurrency transactions. These elements were allegedly used to enable intrusion campaigns against multiple international targets.

The hacker’s victims

The FBI states in an affidavit that at least 11 U.S. companies have been identified as direct victims of these operations, although investigators believe the actual scope is larger.

The affected sectors include technology companies, public agencies, defense contractors, media outlets, transportation companies, healthcare centers, and non-governmental organizations in North America and Europe.

The modus operandi attributed to Void Blizzard is based on the use of stolen or illegally acquired credentials to access corporate networks. Once inside, the attackers allegedly exfiltrated emails, internal documents, and other sensitive data for intelligence or espionage purposes.

Following his arrest, Russian diplomats visited Obrezko in prison and requested his repatriation. Additionally, Russia included him on an international wanted list, adding a geopolitical dimension to the matter, which is still developing.




Click Here For The Original Source.

——————————————————–

..........

.

.

National Cyber Security

FREE
VIEW