The US authorities have charged two Russian intelligence officers and two criminal hackers of have taken part in 2014 Yahoo hack.

The four defendants are:

• Dmitry Aleksandrovich Dokuchaev, 33 — an officer in the FSB Center for Information Security at the time of the hack, and now Russian national and resident.
• Igor Anatolyevich Sushchin, 43 — an FSB officer, a superior to Dokuchaev within the FSB, and Russian national and resident.
• Alexsey Alexseyevich Belan, aka “Magg,” 29 — a Russian national and resident, who has been on the FBI’s Most Wanted Hackers list.
• Karim Baratov, aka “Kay,” “Karim Taloverov” and “Karim Akehmet Tokbergenov,” 22 — a Canadian and Kazakh national and a resident of Canada.

The members of the group are charged of:

• Conspiring to commit computer fraud and abuse
• Conspiring to engage in and the theft of trade secrets
• Conspiring to engage in and committing economic espionage
• Conspiring to commit wire fraud
• Counterfeit access device fraud
• Counterfeit access device making equipment
• Aggravated identity theft
• Transmitting code with the intent to cause damage to computers
• Unauthorized access to a computer for obtaining information for commercial advantage and private financial gain

“A grand jury in the Northern District of California has indicted four defendants, including two officers of the Russian Federal Security Service (FSB), for computer hacking, economic espionage and other criminal offenses in connection with a conspiracy, beginning in January 2014, to access Yahoo’s network and the contents of webmail accounts.” the Department of Justice announced yesterday. 

According to the prosecutors, the hackers accessed at least 30 million accounts as part of a spam campaign aimed to steal the email contents of thousands of people.

According to the indictment, Belan downloaded the Yahoo database, an archive containing usernames, recovery e-mail accounts, phone numbers as well as “certain information required to manually create, or “mint,” account authentication web browser “cookies” for more than 500 million Yahoo accounts.”

Once obtained the information, the hackers used it to gain unauthorized access to the contents of accounts at other webmail providers, including Google. Russian and American officials, Russian journalists, employees of financial services and other businesses were privileged targets of the gang.

The United States authorities have requested extradition for all the suspects arrested in Russia, but it’s difficult due to the absence of extradition treaty with Russia.Let’s close with a note on the hackers, according to the Assistant Attorney General Mary McCord they were not involved in the DNC hack.

Pierluigi Paganini

(Security Affairs – 2014 Yahoo data breach, DoJ)

[adrotate banner=”5″]

[adrotate banner=”13″]