Cryptocurrency Fraud,
Cybercrime,
Fraud Management & Cybercrime
Prosecutors Say Suspects Exploited Network Flaws to Mine Cryptocurrency
Two Canadian nationals are currently facing serious legal repercussions in the United States for their alleged involvement in hacking supercomputers at various universities. They are accused of stealing login credentials and subsequently mining cryptocurrency for personal financial gain. In a notable development, Canada has extradited one of the suspects to the U.S., while federal prosecutors are pursuing custody of the other alleged hacker, whose extradition process is still underway.
The individuals at the center of this investigation, Ryan James Roach, a 35-year-old from Saskatchewan, and Mathiew James Stubbings, a 41-year-old from Ontario, are currently charged with three counts: conspiracy to obtain information from a protected computer and causing damage to it, obtaining information from a protected computer, and intentional damage to a protected computer.
Roach made an appearance in a U.S. district court on October 28, following his arrest, where he is now being held in custody pending a detention hearing. According to announcements from the Department of Justice, Stubbings’ extradition proceedings are ongoing, which adds a layer of complexity to this case as authorities hope to bring both suspects to justice.
A recently unsealed indictment sheds light on the methodologies allegedly employed by the defendants. It claims that Roach and Stubbings exploited vulnerabilities present in their targets’ computer networks, gaining unauthorized access from June 2016 through December 2019. Notably, the victims included a variety of educational institutions located in states such as New York, Tennessee, North Carolina, and Massachusetts, highlighting the broad impact of their cybercriminal activities.
According to the indictment, the suspects took extensive measures to obfuscate their identities. They reportedly rented virtual private servers from providers known for not cooperating with law enforcement, using false names to create a veil of anonymity. Additionally, they utilized compromised computers belonging to another victim, further complicating the traceability of their actions.
Once the defendants infiltrated the networks of their targets, they did not waste time. They conducted reconnaissance to assess the vulnerabilities and established widespread control over the compromised systems. The indictment reveals that they deployed malware to steal credentials and to exfiltrate sensitive data from the victims’ computers.
One of the more alarming aspects of this case is the use of sophisticated cryptocurrency mining software. The defendants allegedly sent this mining software to the high-performance computers at the universities. Investigators noted that at least one supercomputer was dedicated to mining the cryptocurrency Electroneum on behalf of the defendants. This activity reportedly drained massive amounts of computing power, resulting in the unavailability of the machine for legitimate research endeavors, thus severely affecting the academic community’s operations.
The implications of their actions were profound. The indictment states, “As a result of the scheme, the Defendants damaged ten or more protected computers during a one-year period.” Furthermore, they are believed to have caused an aggregate loss of at least $5,000 to individuals affected by their actions, marking a significant financial impact stemming from their illegal activities.
Regarding the potential penalties, the charges against Roach and Stubbings carry a maximum sentence of ten years in prison, along with a $250,000 fine. This serves as a stark reminder of the serious repercussions that can arise from engaging in cybercrime, particularly as law enforcement agencies worldwide ramp up efforts to combat such illicit activities.
Overall, this case exemplifies the ongoing issues surrounding cryptocurrency fraud and the vulnerabilities inherent in the digital age. As experts emphasize, the need for robust cybersecurity measures is more critical than ever for institutions to safeguard their assets and personal information against the growing threat of cybercriminals.