\n<\/p>\n
The Department of Justice has charged a Russian civilian with conspiracy to destroy Ukrainian government computer systems as part of a widespread hacking effort by Russia ahead of its illegal invasion of Ukraine.\u00a0<\/p>\n
U.S. prosecutors in Maryland said Wednesday that Amin Stigal, 22, is wanted for helping to set up servers used by Russian government hackers that were used to launch destructive cyberattacks on Ukraine government ministries in January 2022, a month before the Kremlin ordered tanks and troops to cross Ukraine\u2019s borders.<\/p>\n
The cyberattack campaign, known as \u201cWhisperGate,\u201d relied on so-called wiper malware that masqueraded as ransomware<\/a> but deliberately and irreversibly scrambled the data on infected devices. Prosecutors said the cyberattacks were designed to \u201csow concern\u201d among Ukrainian civil society about the safety of their government\u2019s systems.<\/p>\n Stigal is also accused of helping the hackers working for Russia\u2019s military intelligence unit \u2014 known as the GRU \u2014 to target allies of Ukraine, including the United States, according to the indictment against Stigal that was unsealed on Wednesday.<\/a><\/p>\n According to the unsealed indictment, Stigal allegedly used cryptocurrency to pay for and set up servers from an unnamed U.S.-based company, which allowed the Russian GRU hackers to launch their cyberattacks targeting the Ukrainian government with the data-destroying malware.\u00a0<\/p>\n The Russian hackers stole reams of data during the cyberattacks, including citizens\u2019 health data, criminal records and motor insurance data from Ukrainian government systems, the indictment alleges. The hackers later advertised the data for sale on known cybercrime forums.<\/p>\n U.S. prosecutors say the Russian hackers also targeted an unnamed U.S. government agency based in Maryland dozens of times between 2021 and 2022 prior to the invasion, allowing prosecutors in the district to take jurisdiction over the case and seek to charge Stigal.\u00a0<\/p>\n Later in October 2022, the Russian hackers used the same servers set up by Stigal to target the transportation sector of one unnamed central European country, which U.S. prosecutors said delivered civilian and military aid to Ukraine following the invasion. The incident matches the timing of an October 2022 cyberattack in Denmark<\/a>, which caused mass outages and delays across the country\u2019s railway network at the time.<\/p>\n