{
	"id": "eca0adf3-744f-4d79-a34f-95c40de757b3",
	"created_at": "2026-04-06T00:21:09.024535Z",
	"updated_at": "2026-04-10T13:12:46.169645Z",
	"deleted_at": null,
	"sha1_hash": "25a1467e12c20f6b24c69bbcacfc34ed3f7b7539",
	"title": "Russian developer of Trickbot malware pleads guilty, faces 35-year sentence",
	"llm_title": "",
	"authors": "",
	"file_creation_date": "0001-01-01T00:00:00Z",
	"file_modification_date": "0001-01-01T00:00:00Z",
	"file_size": 77261,
	"plain_text": "Russian developer of Trickbot malware pleads guilty, faces 35-year\r\nsentence\r\nBy Daryna Antoniuk\r\nPublished: 2023-12-01 · Archived: 2026-04-05 23:03:19 UTC\r\nA Russian national pleaded guilty in federal court in Cleveland on Thursday to charges related to his involvement\r\nin developing and deploying the malicious software known as Trickbot. He faces a maximum penalty of 35 years,\r\nthe U.S. Department of Justice said.\r\nAccording to court documents, Vladimir Dunaev, 40, was a member of a cybercriminal organization that deployed\r\nTrickbot to steal money and install ransomware on victims’ computers. The group's victims — including hospitals,\r\nschools, and businesses in the U.S. — suffered tens of millions of dollars in losses.\r\nTrickbot, which was taken down last year, is believed to have stolen more than $180 million worldwide. Dunaev\r\nwas extradited from South Korea to the U.S. in 2021.\r\nDunaev was actively involved in Trickbot’s operation, the DOJ said. In particular, he created browser\r\nmodifications and malicious tools to harvest credentials and mine data from infected computers. He also improved\r\nremote access for Trickbot actors and developed a code to evade detection by legitimate security software.\r\n“Dunaev and his codefendants hid behind their keyboards, first to create Trickbot, then using it to infect millions\r\nof computers worldwide… invading privacy and causing untold disruption and financial damage,” DOJ statement\r\nsaid.\r\nTen victims in the Northern District of Ohio, including Avon schools and a North Canton real-estate company,\r\nwere defrauded of more than $3.4 million via ransomware deployed by Trickbot while Dunaev was involved in\r\nthe operation, prosecutors said.\r\nIn June, one of Dunaev’s co-conspirators, Alla Witte — a Trickbot malware developer and Latvian national —\r\npleaded guilty and was sentenced to two years and eight months in prison.\r\nIn February and September, the U.S. and U.K. also issued financial sanctions on 18 other members of Trickbot,\r\nfreezing their assets and imposing travel bans.\r\nThe individuals targeted by the sanctions “include key actors involved in management and procurement for the\r\nTrickbot group, which has ties to Russian intelligence services,” according to the U.S. Treasury.\r\nhttps://therecord.media/russian-trickbot-malware-developer-pleads-guilty\r\nPage 1 of 2\n\nNo previous article\r\nNo new articles\r\nDaryna Antoniuk\r\nis a reporter for Recorded Future News based in Ukraine. She writes about cybersecurity startups, cyberattacks in\r\nEastern Europe and the state of the cyberwar between Ukraine and Russia. She previously was a tech reporter for\r\nForbes Ukraine. Her work has also been published at Sifted, The Kyiv Independent and The Kyiv Post.\r\nSource: https://therecord.media/russian-trickbot-malware-developer-pleads-guilty\r\nhttps://therecord.media/russian-trickbot-malware-developer-pleads-guilty\r\nPage 2 of 2",
	"extraction_quality": 1,
	"language": "EN",
	"sources": [
		"Malpedia"
	],
	"origins": [
		"web"
	],
	"references": [
		"https://therecord.media/russian-trickbot-malware-developer-pleads-guilty"
	],
	"report_names": [
		"russian-trickbot-malware-developer-pleads-guilty"
	],
	"threat_actors": [],
	"ts_created_at": 1775434869,
	"ts_updated_at": 1775826766,
	"ts_creation_date": 0,
	"ts_modification_date": 0,
	"files": {
		"pdf": "https://archive.orkl.eu/25a1467e12c20f6b24c69bbcacfc34ed3f7b7539.pdf",
		"text": "https://archive.orkl.eu/25a1467e12c20f6b24c69bbcacfc34ed3f7b7539.txt",
		"img": "https://archive.orkl.eu/25a1467e12c20f6b24c69bbcacfc34ed3f7b7539.jpg"
	}
}