A federal grand jury in Maryland has indicted Amin Timovich Stigal, a 22-year-old Russian citizen, on charges of conspiring to hack into and destroy computer systems and data. The indictment accuses Stigal of targeting Ukrainian government systems and data prior to the full-scale Russian invasion of Ukraine. Subsequent targets included computer systems in countries supporting Ukraine, including the United States. Stigal remains at large.
"As alleged, the defendant conspired with Russian military intelligence on the eve of Russia’s unjust and unprovoked invasion of Ukraine to launch cyberattacks targeting the Ukrainian government and later targeting its allies, including the United States," said Attorney General Merrick B. Garland. "The Justice Department will continue to stand with Ukraine on every front in its fight against Russia’s war of aggression, including by holding accountable those who support Russia’s malicious cyber activity."
Assistant Attorney General Matthew G. Olsen stated, "The GRU has repeatedly applied in cyberspace Russia’s statecraft of indiscriminate destruction and intimidation. The Department will do its part to prevent and disrupt such malicious behavior that relies upon online services or infrastructure in the U.S., or that targets U.S. victims. We will also identify, pursue, and eventually hold to account those responsible for Russia’s malicious actions, including the cybercriminals that the Russian government cultivates in furtherance of its malign agenda."
FBI Deputy Director Paul Abbate remarked, "Amin Timovich Stigal attempted to leverage malware to aid the Russian military in the invasion of Ukraine. Today’s indictment demonstrates the FBI’s unwavering commitment to combat malicious cyber activities by our adversaries, and we will continue to work with our international partners to thwart attempts to undermine and harm our allies."
"Malicious cyber actors who attack our allies should know that we will pursue them to the full extent of the law," said U.S. Attorney Erek L. Barron for the District of Maryland. "Cyber intrusion schemes such as the one alleged threaten our national security, and we will use all the technologies and investigative measures at our disposal to disrupt and track down these cybercriminals."
Special Agent in Charge William J. DelBagno of the FBI Baltimore Field Office added, "The indictment of Amin Stigal is yet another example of the FBI’s commitment to combating cyber threats both at home and internationally. To those adversaries who seek to compromise our international partners’ systems, know you will be identified and you will face consequences for your actions. The FBI vows to continually pursue justice and disrupt malicious cyber actors."
Court documents reveal that in January 2022, Stigal conspired with members of Russia's Main Intelligence Directorate (GRU) using a U.S.-based company’s services to distribute malware known as “WhisperGate” across dozens of Ukrainian government entities' computer systems ahead of Russia's invasion.
On January 13, 2022, multiple Ukrainian government networks were attacked by Conspirators who infected computers with WhisperGate malware designed not just as ransomware but as a destructive tool aimed at obliterating target computers and related data.
The Conspirators also exfiltrated sensitive data from compromised Ukrainian systems—including patient health records—and defaced websites with threatening messages aimed at creating fear among Ukrainians regarding their government's data security.
In August 2022, they hacked transportation infrastructure in a Central European country supporting Ukraine. From August 5, 2021 through February 3, 2022, they probed computers belonging to a federal agency in Maryland using similar methods employed against Ukrainian networks.
If convicted, Stigal faces up to five years in prison.
The case is being investigated by the FBI Baltimore Field Office with prosecution led by Assistant U.S. Attorneys Aaron S.J. Zelinsky and Robert I. Goldaris for Maryland's District along with assistance from National Security Division's National Security Cyber Section.
An indictment is merely an allegation; all defendants are presumed innocent until proven guilty beyond a reasonable doubt in court.
---