{ "id": "8f4c3a5f-3abf-4f2b-bc5d-011010f069e5", "created_at": "2026-04-06T00:07:58.752789Z", "updated_at": "2026-04-10T03:21:13.170558Z", "deleted_at": null, "sha1_hash": "df57bea9a905aa58cdfa7765b9751c18fae912cc", "title": "Russian National Extradited to United States to Face Charges for Alleged Role in Cybercriminal Organization", "llm_title": "", "authors": "", "file_creation_date": "0001-01-01T00:00:00Z", "file_modification_date": "0001-01-01T00:00:00Z", "file_size": 47273, "plain_text": "Russian National Extradited to United States to Face Charges for\r\nAlleged Role in Cybercriminal Organization\r\nPublished: 2021-10-28 · Archived: 2026-04-05 23:21:07 UTC\r\nA Russian national, residing in the Yakutsk region of Russia and in Southeast Asia, had his initial appearance in\r\nfederal court today after his extradition from the Republic of Korea to the Northern District of Ohio to face\r\ncharges for his alleged role in a transnational, cybercriminal organization.\r\nAccording to court documents, Vladimir Dunaev, 38, was a member of a transnational, cybercriminal organization\r\nthat deployed a computer banking trojan and ransomware suite of malware known as “Trickbot.”\r\n“Trickbot attacked businesses and victims across the globe and infected millions of computers for theft and\r\nransom, including networks of schools, banks, municipal governments, and companies in the health care, energy,\r\nand agriculture sectors,” said Deputy Attorney General Lisa O. Monaco. “This is the second overseas Trickbot\r\ndefendant arrested in recent months, making clear that, with our international partners, the Department of Justice\r\ncan and will capture cyber criminals around the world. This is another success for the Department’s recently\r\nlaunched Ransomware and Digital Extortion Task Force in dismantling ransomware groups and disrupting the\r\ncybercriminal ecosystem that allows ransomware to exist and to threaten our critical infrastructure.”\r\n“The FBI is determined to utilize our unique tools and capabilities to disrupt transnational cybercriminal\r\norganizations, such as the group that developed and delivered Trickbot, and remains committed to imposing risk\r\nand consequence upon these criminals,” said Deputy Director Paul Abbate of the FBI. “Pursuing cyber criminals\r\nrequires considerable patience, expertise, and resources, but the FBI has a long memory and will ensure that these\r\nmalicious actors cannot evade detection or avoid the full weight of law enforcement actions.”\r\n“The Trickbot malware was designed to steal the personal and financial information of millions of people around\r\nthe world, thereby causing extensive financial harm and inflicting significant damage to critical infrastructure\r\nwithin the United States and abroad,” said Acting U.S. Attorney Bridget M. Brennan of the Northern District of\r\nOhio. “Today’s announcement underscores the great lengths federal law enforcement officials and our\r\ninternational partners will go to hold these alleged cybercriminals accountable for their actions.”\r\n“This indictment reflects the dynamic landscape in which international criminals utilize sophisticated cyber\r\nmethods to take advantage of and defraud, unsuspecting victims anywhere in the world,” said Special Agent in\r\nCharge Eric Smith of the FBI’s Cleveland Field Office. “This multi-year investigation demonstrates the\r\ncommitment by the FBI to aggressively pursue these individuals despite the complexity and global character cyber\r\ninvestigations can so often bring. The FBI encourages any victim of cyber fraud to file a report with the FBI’s\r\nInternet Crime Complaint Center at www.ic3.gov.”\r\nThe indictment alleges that beginning in November 2015, and continuing through August 2020, Dunaev and\r\nothers stole money, confidential information, and damaged computer systems from unsuspecting victims,\r\nincluding individuals, financial institutions, school districts, utility companies, government entities, and private\r\nhttps://www.justice.gov/opa/pr/russian-national-extradited-united-states-face-charges-alleged-role-cybercriminal\r\nPage 1 of 3\n\nbusinesses. To perpetuate their criminal scheme, the defendants allegedly used a network of co-conspirators and\r\nfreelance computer programmers, known as the Trickbot Group, to create, deploy, and manage the Trickbot\r\nmalware, which infected millions of computers and computer systems worldwide.\r\nDunaev is alleged to have been one such co-conspirator, working as a malware developer for the Trickbot Group.\r\nDunaev allegedly performed a variety of developer functions in support of the Trickbot malware, including\r\nmanaging the malware’s execution, developing popular browser modifications and helping to conceal the malware\r\nfrom detection by security software. \r\nEarlier this year, the Justice Department announced the arrest and arraignment of Alla Witte, a Latvian national\r\ncharged for her role in the Trickbot Group.\r\nAccording to court documents, the Trickbot malware was designed to capture online banking login credentials and\r\nharvest other personal information, including credit card numbers, emails, passwords, dates of birth, social\r\nsecurity numbers, and addresses from infected computers through the use of web injects and keystroke logging.\r\nLater versions of Trickbot were adapted to facilitate the installation and use of ransomware. \r\nAccording to the indictment, the defendants used these stolen login credentials and other personal information to\r\ngain access to online bank accounts, execute unauthorized electronic funds transfers and launder the money\r\nthrough U.S. and foreign beneficiary accounts.\r\nDunaev was extradited from the Republic of Korea on Oct. 20. He is charged with conspiracy to commit computer\r\nfraud and aggravated identity theft, conspiracy to commit wire and bank fraud, conspiracy to commit money\r\nlaundering, and multiple counts of wire fraud, bank fraud, and aggravated identity theft. If convicted of all counts,\r\nDunaev faces a maximum penalty of 60 years’ imprisonment. A federal district court judge will determine any\r\nsentence after considering the U.S. Sentencing Guidelines and other statutory factors.\r\nThis case was investigated by the FBI’s Cleveland Field Office.\r\nThe Justice Department’s Office of International Affairs provided invaluable assistance in securing the arrest and\r\nextradition of Dunaev to the United States, with substantial support provided by the Republic of Korea.\r\nSenior Counsel C.S. Heath of the Criminal Division’s Computer Crime and Intellectual Property Section and\r\nAssistant U.S. Attorneys Daniel J. Riedl and Duncan T. Brown of the Northern District of Ohio are prosecuting\r\nthe case.\r\nThis case is part of the Department of Justice’s Ransomware and Digital Extortion Task Force, which was created\r\nto combat the growing number of ransomware and digital extortion attacks. As part of the Task Force, the\r\nCriminal Division, working with the U.S. Attorneys’ Offices, prioritizes the disruption, investigation, and\r\nprosecution of ransomware and digital extortion activity by tracking and dismantling the development and\r\ndeployment of malware, identifying the cybercriminals responsible, and holding those individuals accountable for\r\ntheir crimes. The department, through the Task Force, also strategically targets the ransomware criminal\r\necosystem as a whole and collaborates with domestic and foreign government agencies as well as private sector\r\npartners to combat this significant criminal threat.\r\nhttps://www.justice.gov/opa/pr/russian-national-extradited-united-states-face-charges-alleged-role-cybercriminal\r\nPage 2 of 3\n\nAn indictment is merely an allegation, and all defendants are presumed innocent until proven guilty beyond a\r\nreasonable doubt in a court of law.\r\nSource: https://www.justice.gov/opa/pr/russian-national-extradited-united-states-face-charges-alleged-role-cybercriminal\r\nhttps://www.justice.gov/opa/pr/russian-national-extradited-united-states-face-charges-alleged-role-cybercriminal\r\nPage 3 of 3", "extraction_quality": 1, "language": "EN", "sources": [ "Malpedia" ], "references": [ "https://www.justice.gov/opa/pr/russian-national-extradited-united-states-face-charges-alleged-role-cybercriminal" ], "report_names": [ "russian-national-extradited-united-states-face-charges-alleged-role-cybercriminal" ], "threat_actors": [], "ts_created_at": 1775434078, "ts_updated_at": 1775791273, "ts_creation_date": 0, "ts_modification_date": 0, "files": { "pdf": "https://archive.orkl.eu/df57bea9a905aa58cdfa7765b9751c18fae912cc.pdf", "text": "https://archive.orkl.eu/df57bea9a905aa58cdfa7765b9751c18fae912cc.txt", "img": "https://archive.orkl.eu/df57bea9a905aa58cdfa7765b9751c18fae912cc.jpg" } }