Der ukrainische Staatsbürger Mark Sokolovsky wurde heute wegen seiner Beteiligung an der Cybercrime-Operation "Raccoon Stealer" zu fünf Jahren Haft verurteilt.
According to unsealed court documents, Sokolovsky (also known as raccoon-stealer, Photix, and black21jack77777) and his conspirators rented the malware to other threat actors under a MaaS (malware-as-a-service) model for $75 per week or $200 monthly.
Nach der Infektion eines Geräts sammelt und stiehlt Raccoon Stealer eine Vielzahl von Daten, darunter Anmeldeinformationen, Kryptowährungs-Wallets, Kreditkartendaten, E-Mail-Daten und andere sensible Informationen aus Dutzenden von Anwendungen.
In March 2022, police arrested Sokolovsky in the Netherlands. The FBI also took the malware offline by dismantling its infrastructure in a joint action with law enforcement authorities in the Netherlands and Italy.
The Raccoon Stealer cybercrime gang also suspended operations around the time of Sokolovsky’s arrest, saying that one of their lead developers had been killed during Russia’s invasion of Ukraine. Since then, the malware operation has been revived several times, with newer versions adding more data theft capabilities.
Sokolovsky was extradited to the United States in February 2024 after being indicted for fraud, money laundering, and aggravated identity theft in October 2022. One year later, he pleaded guilty and agreed to pay at least $910,844.61 in restitution.
“Mark Sokolovsky was a key player in an international criminal conspiracy that victimized countless individuals by administering malware which made it cheaper and easier for even amateurs to commit complex cybercrimes,” said U.S. Attorney Jaime Esparza today.
"Sokolovskys Infostealer war für die Kompromittierung von mehr als 52 Millionen Benutzeranmeldeinformationen verantwortlich, die dann zur Förderung von Betrug, Identitätsdiebstahl und Ransomware-Angriffen auf Millionen von Opfern weltweit verwendet wurden", fügte FBI Special Agent in Charge Aaron Tapp hinzu.
After dismantling Raccoon Stealer’s infrastructure in March 2022, the FBI also created a website to help victims check whether their information was included in the stolen data using this malware.
Wenn Ihre Daten kompromittiert wurden, erhalten Sie eine E-Mail mit zusätzlichen Informationen und Ressourcen an die Adresse, die Sie bei der Suche im Raccoon Infostealer Disclosure Portal des FBI angegeben haben.
