The US Department of Justice has announced charges against 16 individuals linked to a malware operation, DanaBot, which infected roughly 300,000 machines globally. The group, believed to be Russia-based, carried out activities ranging from ransomware to cyberattacks in Ukraine and espionage against foreign governments. The malware was sold in an “affiliate” model to other hacking groups, who used it for various forms of cybercrime. The DanaBot’s targets spread from Europe and Australia to Canadian and US financial institutions.

Russian Cybercriminal Charged in $24 Million Qakbot Ransomware Scheme
Russian national Rustam Rafailevich Gallyamov faces US federal charges for allegedly running a major malware operation, which deployed the notorious Qakbot malware, infecting over 700,000