Tags
Baratov, Belan, cyber-crime, cyber-security, data breaches, Dmitry Dokuchaev, DOJ, FBI, foreign state-sponsored criminal behavior, FSB, Grand Jury, hacking related sanctions, homeland security, Igor Sushchin, Information technology, international law enforcement partners, internet security, Interpol, IT Products, IT Updates, journalists, Kaspersky, KGB, law enforcement, Malicious Cyber-Enabled Activities, Michael Flynn, National Security, National Security Advisor, Putin, Russia, Russia election hacking, Russian Federation, Russian sanctions, Ukraine, Yahoo, Yahoo hacking case
5 years in jail. Does that really send a clear message of significant consequences? Probably not. It appears to be much less than the maximum which he could have gotten. Assuming that the maximum for all counts is additive then he could have gotten almost 40 years in jail. That would have sent a message. Sentencing maximums here: https://www.justice.gov/opa/pr/us-charges-russian-fsb-officers-and-their-criminal-conspirators-hacking-yahoo-and-millions
Thus, Acting U.S. Attorney Tse’s statement looks like a stupid joke: “In sentencing Baratov to five years in prison, the Court sent a clear message to hackers that participating in cyber attacks sponsored by nation states will result in significant consequences.” (USDOJ Press Release)
Baratov was part of the larger Yahoo attack, which resulted in many people getting locked out of their accounts – sometimes permanently, even if they weren’t hacked. People sometimes lost decades of information, when they lost their accounts.
““It’s difficult to overstate the unprecedented nature of this conspiracy, in which members of a foreign intelligence service directed and empowered criminal hackers to conduct a massive cyber-attack against 500 million victim user accounts,” said Special Agent in Charge Bennett. “Today’s sentencing demonstrates the FBI’s unwavering commitment to disrupt and prosecute malicious cyber actors despite their attempts to conceal their identities and hide from justice.”” (USDOJ News Release)
So, did the FBI gets something useful out of him in exchange for getting off so lightly?
The press release says he will “pay a fine of UP TO” $2.5 million at $250,000 per account “with any assets he has remaining…“. So, how much will he really pay? They fail to say. “In addition to any prison sentence, Baratov agreed to pay restitution to his victims, and to pay a fine up to $2,250,000, at $250,000 per count, with any assets he has remaining after satisfying a restitution award.” (US DOJ)
The indictment sounds like he doesn’t have much other than an expensive car. The indictment sounds like he was given $100 per account accessed by him. The Press Release says: “As part of his plea agreement, Baratov not only admitted to agreeing and attempting to hack at least 80 webmail accounts on behalf of one of his FSB co-conspirators, but also to hacking more than 11,000 webmail accounts in total from in or around 2010 until his March 2017 arrest by Canadian authorities….“. https://www.justice.gov/opa/pr/international-hacker-hire-who-conspired-and-aided-russian-fsb-officers-sentenced-60-months It sounds like the additional 11,000 were unrelated to this case. If he got paid $100 per account then 11,080 would be over $1.1 million. However, if it’s only the 80 accounts it would be a mere $8000.
“Department of Justice
Office of Public Affairs
FOR IMMEDIATE RELEASE
Tuesday, May 29, 2018
International Hacker-For-Hire Who Conspired With and Aided Russian FSB Officers Sentenced to 60 Months in Prison
Russian Officers Tasked Prolific Hacker-for-Hire to Target Webmail Accounts
Karim Baratov, aka Kay, aka Karim Taloverov, aka Karim Akehmet Tokbergenov, 23, was sentenced to five years in prison and ordered to pay a fine, which encompasses all of his remaining assets.
Assistant Attorney General for National Security John C. Demers, Acting U.S. Attorney Alex G. Tse for the Northern District of California, and Special Agent in Charge John F. Bennett of the FBI’s San Francisco Field Office made the announcement. The sentence was handed down today by U.S. District Judge the Honorable Vince Chhabria.
“Criminal hackers and the countries that sponsor them make a grave mistake when they target American companies and citizens. We will identify them wherever they are and bring them to justice,” said Assistant Attorney General Demers. “I would like to thank Canadian law enforcement authorities for their tremendous assistance in bringing Baratov to justice. We will continue to work with our foreign partners to find and prosecute those who would violate our laws.”
“The sentence imposed reflects the seriousness of hacking for hire,” said Acting U.S. Attorney Tse. “Hackers such as Baratov ply their trade without regard for the criminal objectives of the people who hire and pay them. These hackers are not minor players; they are a critical tool used by criminals to obtain and exploit personal information illegally. In sentencing Baratov to five years in prison, the Court sent a clear message to hackers that participating in cyber attacks sponsored by nation states will result in significant consequences.”
“It’s difficult to overstate the unprecedented nature of this conspiracy, in which members of a foreign intelligence service directed and empowered criminal hackers to conduct a massive cyber-attack against 500 million victim user accounts,” said Special Agent in Charge Bennett. “Today’s sentencing demonstrates the FBI’s unwavering commitment to disrupt and prosecute malicious cyber actors despite their attempts to conceal their identities and hide from justice.”
Baratov, a Canadian national and resident, and three other defendants, including two officers of the Russian Federal Security Service (FSB), Russia’s domestic law enforcement and intelligence service, were charged with a number of offenses relating to the hacking of webmail accounts at Yahoo and other service providers. In particular, the defendants were charged in a computer hacking conspiracy in which the two Russian FSB officers hired criminal hackers to collect information through computer intrusions in the United States and abroad, which resulted in the unauthorized access of Yahoo’s network and the spear phishing of webmail accounts at other service providers between January 2014 and December 2016.
Baratov’s role in the charged conspiracy was to hack webmail accounts of individuals of interest to his coconspirator who was working for the FSB and send those accounts’ passwords to Dokuchaev in exchange for money.
The Indictment is available here, https://www.justice.gov/opa/press-release/file/948201/download
and its allegations are summarized in greater detail in the press release that attended the unsealing of the Indictment on March 15, 2017. https://www.justice.gov/opa/pr/us-charges-russian-fsb-officers-and-their-criminal-conspirators-hacking-yahoo-and-millions
Baratov has been detained since his arrest in Canada in March 2017. Baratov waived extradition to the United States and was transferred to the Northern District of California in August 2017. In November 2017, Baratov pleaded guilty to Count One and Counts Forty through Forty-Seven of the Indictment.
Count One charged Baratov, Dokuchaev, Sushchin and Belan with conspiring to violate the Computer Fraud and Abuse Act by stealing information from protected computers and causing damage to protected computers.
Counts Forty through Forty-Seven charged Baratov and Dokuchaev with aggravated identity theft. As part of his plea agreement, Baratov not only admitted to agreeing and attempting to hack at least 80 webmail accounts on behalf of one of his FSB co-conspirators, but also to hacking more than 11,000 webmail accounts in total from in or around 2010 until his March 2017 arrest by Canadian authorities. In addition to any prison sentence, Baratov agreed to pay restitution to his victims, and to pay a fine up to $2,250,000, at $250,000 per count, with any assets he has remaining after satisfying a restitution award.
The FBI, led by the San Francisco Field Office, conducted the investigation that resulted in the charges in the Indictment. The case is being prosecuted by the U.S. Attorney’s Office for the Northern District of California and the U.S. Department of Justice National Security Division’s Counterintelligence and Export Control Section, with support from the Justice Department’s Office of International Affairs.
Topic(s):
Counterintelligence and Export Control
Component(s):
National Security Division (NSD)
USAO – California, Northern
Press Release Number:
18-703
Updated May 29, 2018
Quick Links
Report a Crime
View Most Wanted Fugitives
Report and Identify Missing Persons
Get Help & Information for Crime Victims
Locate a Prison, Inmate, or Sex Offender
Find Sales of Seized Property
Submit a Complaint
Register, Apply for Permits, or Request Records
https://www.justice.gov/opa/pr/international-hacker-hire-who-conspired-and-aided-russian-fsb-officers-sentenced-60-months
Judge born in the US to parents from Mumbai, India: https://en.wikipedia.org/wiki/Vince_Chhabria
Mining Awareness + 