Russian national Vladimir Dunaev was extradited from the Republic of North Korea to the Northern District of Ohio to face charges for his alleged role in a transnational, cybercriminal organization. Dunaev was allegedly part of a group that deployed a computer banking trojan and ransomware malware known as Trickbot. According to the indictment, Dunaev worked as a developer for the Trickbot group from November 2015 to April 2020. In that time, the group stole money, confidential information, and damaged computer systems of unsuspecting victims, financial institutions, school districts, government entities, and private businesses. Trickbot was originally created to steal online banking login information and capture other personal information such as credit card numbers, emails, dates of birth, social security numbers and addresses from infected computers through key stroke logging and the use of web injects. Trickbot was then modified to facilitate the installation and use of ransomware. Dunaev was extradited on 20 October and is being charged with conspiracy to commit computer fraud and aggravated identity theft, conspiracy to commit wire and bank fraud, conspiracy to commit money laundering, and multiple accounts of wire fraud, bank fraud, and aggravated identity theft. Dunaev faces up to 60 years of imprisonment.
12 Essentials for a Successful SOC Partnership
As cyber threats continue to impact businesses of all sizes, the need for round-the-clock security