A Russian national, Rustam Rafailevich Gallyamov, has been indicted in the US for leading the Qakbot malware and botnet operation, which infected hundreds of thousands of computers worldwide. Despite law enforcement actions that disrupted Qakbot’s infrastructure, Gallyamov continues malicious activities, including malware deployment and extortion. #Qakbot #BlackBasta #Cactus #Gallyamov #OperationEndgame
Keypoints
- Rustam Gallyamov is accused of developing and controlling the Qakbot malware since 2008.
- Qakbot was spread via spam, hijacked emails, and exploiting vulnerabilities, infecting hundreds of thousands worldwide.
- Victims included organizations across healthcare, manufacturing, technology, and more sectors.
- Gallyamov allegedly sold access to infected machines and infected some victims with ransomware like Black Basta and Cactus.
- Law enforcement seized over $24 million in cryptocurrency and disrupted Qakbot’s infrastructure in 2023, but Gallyamov remains active.
Read More: https://www.securityweek.com/russian-qakbot-gang-leader-indicted-in-us/