Virtual Event: Threat Detection & Incident Response Summit - Watch Now
Connect with us

Hi, what are you looking for?

SecurityWeekSecurityWeek

Cybercrime

US Offering $2.5 Million Reward for Belarusian Malware Distributor

The US government is offering a $2.5 million reward for information leading to the arrest of malware distributor Volodymyr Kadariya.

The US Department of State this week announced a $2.5 million reward for information leading to the arrest of a Belarusian national allegedly involved in the mass distribution of malware.

The individual, Volodymyr Kadariya, 38, a Belarussian and Ukrainian national, allegedly participated in a “significant malware organization” that distributed the Angler Exploit Kit and other malware to the computers of millions of victims, the State Department says.

Kadariya, also known as Vladimir Kadaria, Volodymyr Kadariya, and Andrii Kovalov, was indicted in June 2023 with wire fraud conspiracy, computer fraud conspiracy, and wire fraud, along with Maksim Silnikau, 38, a Belarussian and Ukrainian national, and Andrei Tarasov, 33, a Russian national.

Kadariya, the indictment alleges, was involved in Angler Exploit Kit’s distribution through malvertising and other means from October 2013 through March 2022. Angler was used for the distribution of other malware families, including ransomware.

“The malvertising campaigns were designed to appear legitimate, but often redirected victim internet users who viewed or accessed the advertisements to malicious sites and servers that sought to defraud the users or delivered malware to the users’ devices,” a notice on the Secret Service’s website reads.

One of the distribution methods allegedly employed by Kadariya and his co-conspirators, the Secret Service says, involved scareware ads, which displayed false messages claiming the victim’s device was infected with a virus or had another issue.

Advertisement. Scroll to continue reading.

The victim was then tricked into buying or downloading dangerous software (providing the threat actors with remote access to the device) or sharing personal or financial information.

To profit from their scheme, Kadariya and his co-conspirators allegedly sold access to the compromised devices on Russian cybercrime forums, and sold the banking and login information stolen from their victims.

Earlier this month, the US announced that Silnikau was extradited from Poland to the US, to face charges related to his involvement in the malware distribution scheme and in the development and distribution of the Ransom Cartel ransomware.

Related: Russian Member of Karakurt Cyber Extortion Gang Charged in US

Related: Justice Department Disrupts North Korean ‘Laptop Farm’ Operation

Related: Jury Convicts Seattle Woman in Massive Capital One Hack

Related: US Accuses Venezuelan Doctor of Creating and Selling Ransomware

Written By

Ionut Arghire is an international correspondent for SecurityWeek.

Daily Briefing Newsletter

Subscribe to the SecurityWeek Email Briefing for the latest cybersecurity threats, trends, and expert insights.

Trending

Daily Briefing Newsletter

Subscribe to the SecurityWeek Email Briefing to stay informed on the latest threats, trends, and technology, along with insightful columns from industry experts.

Delve into big-picture strategies to reduce attack surfaces, improve patch management, conduct post-incident forensics, and tools and tricks needed in a modern organization.

Register

Organizations are investing heavily in third-party risk management, but breaches, delays, and blind spots continue to persist. Join this live webinar as we examine the gap between how organizations think their third-party risk programs are performing and what’s actually happening in practice.

Register

People on the Move

Joe Chen has become Chief Technology Officer at Trellix.

Usercentrics has named Pawan Hegde as COO and Elena Ignatova as CPTO.

SecureAuth has named Mark van Oppen as Chief Revenue Officer.

More People On The Move

Expert Insights

Daily Briefing Newsletter

Subscribe to the SecurityWeek Email Briefing to stay informed on the latest cybersecurity news, threats, and expert insights. Unsubscribe at any time.