Cybercrime

Two People Arrested in Australia and US for Development and Sale of Hive RAT

Authorities in Australia and the US have arrested and charged two individuals for developing and selling the Hive RAT.

Authorities in Australia and the US have arrested and charged two individuals for developing and selling the Hive RAT.

Authorities in Australia and the US have announced the arrest and indictment of two individuals for their roles in the development and sale of the Hive remote access trojan (RAT).

Initially developed and distributed under the name of Firebird, the malware was marketed as a remote access tool that could stay hidden and steal sensitive information from the targeted systems.

Last week, law enforcement in Australia announced the arrest of an individual allegedly involved in the development of Firebird and its sale through a hacking forum.

The man was charged with twelve counts of computer offenses and is scheduled to appear in court on May 7, the Australian authorities said.

Simultaneously, the US Department of Justice (DoJ) announced the arrest of and charges against Edmond Chakhmakhchyan, a 24 year-old resident of Van Nuys, San Fernando Valley, for selling the Hive RAT on a hacker forum.

According to the indictment, Chakhmakhchyan, who used the online moniker of ‘Corruption’, was involved in advertising and selling the RAT, and also provided paying customers with assistance.

Advertisement. Scroll to continue reading.

The malware provided users with unauthorized access to the infected systems, allowing them to close or disable applications, steal login information for bank accounts and cryptocurrency wallets, browse data on the system, log keystrokes, and eavesdrop on the victim’s communications.

According to the indictment, Chakhmakhchyan started working with the Firebird/Hive RAT author in 2020 and at one point sold the malware to “an undercover employee of a law enforcement agency”.

Evidence collected by investigators allegedly shows that Chakhmakhchyan was aware that the RAT would be used by customers to conduct illegal activities, such as stealing cryptocurrency.

Chakhmakhchyan appeared in court last week and pleaded not guilty. He is scheduled for trial on June 4.

Related: Two More Individuals Charged for DraftKings Hacking

Related: Nigerian Arrested, Charged in $7.5 Million BEC Scheme Targeting US Charities

Related: Canadian Man Sentenced to Prison for Ransomware Attacks

Related: Warzone RAT Shut Down by Law Enforcement, Two Arrested

Related Content

Malware & Threats

Delivered via phishing, the malware provides reconnaissance, remote execution, and data exfiltration capabilities.

Malware & Threats

The Hirudo malware combines elements of a traditional banking trojan and a full-featured RAT.

Cybercrime

Investigators stormed 40 locations in Texas and seized 187 laptops used by North Korean IT workers to hide their location.

Cybercrime

The suspect is believed to be Edward Dubrovsky, a Canadian cybersecurity executive who was visiting the United States for a conference.

Cybercrime

An alleged leader of Tren de Aragua’s ATM jackpotting activities, Canelon Aguirre was on the FBI’s top 10 most wanted list since March 2026.

Cybercrime

Known as Rey, the suspect is reportedly helping the FBI identify and locate other members of the extortion group.

Tracking & Law Enforcement

Pepijn van der Stap was convicted in 2023 for hacking multiple organizations, stealing their data, and extorting them.

Malware & Threats

The high-severity, unauthenticated vulnerability tracked as CVE-2025-25249 was patched in January 2026.

Copyright © 2026 SecurityWeek ®, a Wired Business Media Publication. All Rights Reserved.

Exit mobile version