Jurisdiction: Global / International
Court filings and enforcement actions documenting cyber intrusions within or targeting entities in Global / International.
Key Facts
- 9 documented prosecution matters involving Global / International.
- Cumulative identified losses exceed $9.5 billion.
- Includes federal court filings, international extraditions, and sanctions designations.
Documented Incidents (9)
U.S. v. Peter Levashov (Kelihos Botnet)
Russian operator (Severa) of the notorious Kelihos botnet, controlling over 100,000 infected computers worldwide used to harvest credentials, distribute ransomware, and blast billions of spam and stock pump-and-dump emails daily.
U.S. v. Kirill Victorovich Firsov (Deer.io Dark Web Shop)
Russian administrator of Deer.io, a decentralized cyber storefront platform hosting over 24,000 active automated shops selling hacked accounts, corporate credentials, and identity documents.
U.S. v. Sergey Medvedev et al. (Infraud Organization)
Global cybercrime enterprise operating under the slogan 'In Fraud We Trust' with over 10,000 members, trafficking in stolen identities, counterfeit documents, compromised credit cards, and banking trojans.
U.S. v. Ross Ulbricht (Dread Pirate Roberts / Silk Road)
Historic trial and life sentencing of Ross William Ulbricht, creator and operator of Silk Road, the internet's first comprehensive darknet market using Tor and Bitcoin.
U.S. v. Gal Vallerius (Dream Market OxyMonster Administrator)
Federal prosecution of French cybercriminal Gal Vallerius (known as OxyMonster), senior administrator and escrow vendor for Dream Market darknet marketplace, arrested at Atlanta Hartsfield-Jackson airport while traveling to the World Beard Championships and sentenced to 20 years in federal prison.
CrowdStrike Falcon Sensor Channel File 291 Global Windows Outage
Unprecedented global IT blackout triggered by an invalid content configuration update (Channel File 291) deployed to CrowdStrike Falcon sensor software, crashing 8.5 million Microsoft Windows devices into unbootable Blue Screen of Death loops, paralyzing commercial aviation, healthcare systems, and retail banks worldwide.
XZ Utils liblzma Upstream Linux Supply Chain Backdoor (CVE-2024-3094)
Sophisticated multi-year social engineering and software supply chain operation where persona Jia Tan gained co-maintainer status on the foundational open-source xz compression project, embedding a multi-stage obfuscated backdoor into liblzma tarballs that hijacked OpenSSH sshd authentication to enable unauthorized pre-auth remote code execution.
Log4Shell Ubiquitous Remote Code Execution Crisis (CVE-2021-44228)
Universal zero-day vulnerability in Apache Log4j (Log4Shell) where arbitrary JNDI lookup strings (${jndi:ldap://...}) processed by logger components permitted unauthenticated remote code execution, triggering mass scanning and exploitation across billions of enterprise cloud servers by nation-state actors and ransomware syndicates worldwide.
3CX DesktopApp Cascading Supply Chain Attack (Lazarus Group)
North Korean state-sponsored threat group Lazarus compromised VoIP communications software provider 3CX, injecting malware into digitally signed Windows and macOS builds of 3CXDesktopApp downloaded by over 600,000 corporate customers, in the first documented case of one software supply chain compromise directly enabling a second downstream supply chain breach.