{"id":55169,"date":"2024-01-26T15:14:40","date_gmt":"2024-01-26T15:14:40","guid":{"rendered":"https:\/\/packetstormsecurity.com\/news\/view\/35455\/Trickbot-Malware-Scumbag-Gets-5-Years.html"},"modified":"2024-01-26T15:14:40","modified_gmt":"2024-01-26T15:14:40","slug":"trickbot-malware-scumbag-gets-5-years","status":"publish","type":"post","link":"https:\/\/www.threatshub.org\/blog\/trickbot-malware-scumbag-gets-5-years\/","title":{"rendered":"Trickbot Malware Scumbag Gets 5 Years"},"content":{"rendered":"

A former Trickbot developer has been sent down for five years and four months for his role in infecting American hospitals and businesses with ransomware and other malware, costing victims tens of millions of dollars in losses.<\/p>\n

Vladimir Dunaev, of Amur Oblast in Russia, was sentenced in the US yesterday after pleading guilty<\/a> on November 30 to two counts: conspiracy to commit computer fraud, and conspiracy to commit wire fraud.<\/p>\n

Between June 2016 and June 2021, Dunaev worked as a developer for the criminal gang, providing “specialized services and technical abilities,” according to his plea agreement [PDF<\/a>].<\/p>\n

These special skills included recruiting other coders, buying and managing servers used to deploy and operate the Windows nasty Trickbot, encrypting the malware to avoid detection by security software, spamming and phishing potential victims, and then laundering stolen funds. He also added support for stealing information out of victims’ browsers, such as their online account credentials.<\/p>\n

“For instance, Dunaev developed browser modifications for several widely used open-source browsers, such as FireFox and Chrome, using open-source codebases for each browser called FireFox Nightly and Chromium,” the court documents say. “These modifications facilitated and enhanced the remote access obtained by Trickbot by allowing actors to steal passwords, credentials, and other stored information.”<\/p>\n