Ukrainian Hacker Jailed for 4-Years in U.S. for Selling Access to Hacked Servers

A 28-year-old Ukrainian countrywide has been sentenced to four years in prison for siphoning 1000’s of server login credentials and marketing them on the dark web for financial obtain as aspect of a credential theft plan.

Glib Oleksandr Ivanov-Tolpintsev, who pleaded responsible to his offenses before this February, was arrested in Poland in Oct 2020, before currently being extradited to the U.S. in September 2021.

The unlawful sale associated the trafficking of login credentials to servers situated across the world and individually identifiable facts these kinds of as dates of birth and Social Security numbers belonging to U.S. citizens on a darknet market.

✔ Approved From Our Partners

Protect and backup your data using AOMEI Backupper. AOMEI Backupper takes secure and encrypted backups from your Windows, hard drives or partitions. With AOMEI Backupper you will never be worried about loosing your data anymore.

Get AOMEI Backupper with 72% discount from an authorized distrinutor of AOMEI: SerialCart® (Limited Offer).

➤ Activate Your Coupon Code

The unnamed internet site purportedly available more than 700,000 compromised servers for sale, which include at minimum 150,000 in the U.S. alone. Considered to have been operational from close to Oct 2014, the underground marketplace was seized by regulation enforcement authorities on January 24, 2019, according to court documents.

This exactly coincides with the dismantling of the xDedic Marketplace pursuing a year-lengthy investigation on the very same day by agencies from the U.S., Belgium, Ukraine, and Germany.

“The xDedic Market marketed accessibility to compromised desktops throughout the world as perfectly as personalized information,” Europol explained at the time, incorporating, “consumers of xDedic could search for compromised computer qualifications by conditions, these types of as price, geographic place, and functioning process.”

Victims spanned a wide gamut of sectors like governments, hospitals, emergency companies, simply call centers, metropolitan transit authorities, law corporations, pension cash, and universities.

“When bought, criminals used these servers to facilitate a broad vary of illegal exercise that integrated ransomware attacks and tax fraud,” the U.S. Justice Division (DoJ) noted in a push statement.

Ivanov-Tolpintsev is claimed to have received the server usernames and passwords by indicates of a botnet that was used to brute-force and password spraying attacks, listing on sale these hacked qualifications on the marketplace from 2017 by way of 2019 and netting $82,648 in return.

The sentencing will come as the DoJ awarded a jail term of at least five yrs to a trio of cybercriminals for conspiracy to dedicate fraud and aggravated id theft.

“From at least 2015 through 2020, [Jean Elie Doreus] Jovin, Alessandro Doreus, and Djouman Doreus conspired to knowingly, and with intent to defraud, possess tens of thousands of counterfeit and unauthorized entry devices—including the names, Social Security numbers, account quantities, usernames, and passwords of identity theft victims,” the department said.

Uncovered this write-up fascinating? Comply with THN on Fb, Twitter  and LinkedIn to read additional distinctive content we post.