The federal large jury in Los Angeles charged 16 people suspected of developing and spreading the Danabot virus. Malicious software infected more than 300,000 computers around the world and contributed to crypto -mesh, causing damage in the amount of at least $ 50 million.

Among the US Department of Justice, two Russians appear: Alexander Stepanov, known for the investigation as Jimmbee, and Artem Kalinkin under the ONIX pseudonym, both from Novosibirsk. The accusations against Stepanov include conspiracy, fraud using electronic means, the theft of personal data and banking fraud, for which the Russian faces up to five years in prison. Kalinkin is accused of conspiracy and unauthorized access to computers, which can lead to 72 years in prison.

According to the indictment, for the first time discovered in 2018, the Danabot was a “malicious software” platform (Malware-A-A-Service), distributed through the cybercriminals forums. Access to Danabot was leased for $ 1000–4000 per month.

Malicious software was used to steal the accounting data of cryptocurrency wallets, interception of transactions and installation of booster programs requiring a ransom in cryptocurrency. Hackers used Danabot for attacks on users of crypto -streaks and digital assets.

Malicious software made it possible to intercept passwords, access keys to wallets, as well as write down the actions of users, including entering data for cryptocurrency transactions.

A separate version of Danabot was used for espionage for financial and diplomatic structures, sending stolen data, including information about cryptocurrency operations, to the servers of attackers.

Earlier it became known that the Chinese producer of Procolored Printers distributed official utilities among the users of products, infected with a beacdor program used to steal cryptocurrency. The harmful program was integrated by unknown attackers into installation drivers and service utilities posted on the official website of the Procolored.