Assistant Attorney General Matthew G. Olsen announced charges against five officers of the Russian military intelligence agency, GRU, and one civilian Russian cyber-criminal for their involvement in cyber intrusions. The announcement was made alongside U.S. Attorney Erek Barron for the District of Maryland and Special Agent in Charge William DelBagno of the FBI Baltimore Field Office.
The superseding indictment adds to charges previously made public in June against Amin Stigal, a Russian civilian. According to the allegations, the defendants are responsible for destructive computer attacks known as the “WhisperGate” campaign, which targeted computers in Ukraine shortly before Russia’s invasion in February 2022. The indictment also alleges conspiracies related to cyber intrusions targeting victims in the United States, Ukraine, and other locations.
"This WhisperGate campaign included the targeting of civilian infrastructure and Ukrainian computer systems wholly unrelated to the military or national defense," Olsen stated. He added that these systems included government agencies responsible for emergency services, judiciary, food safety, and education.
The defendants allegedly stole and leaked personal data of thousands of Ukrainian civilians to undermine morale. They also pretended to be criminals engaged in ransomware attacks by leaving ransom notes demanding Bitcoin payments for data they knew had been destroyed.
Olsen highlighted that these activities were not limited to Ukraine but extended globally, including targeting computers around the world and using U.S.-based infrastructure for their operations. The conspirators also targeted systems in 26 NATO partner countries, including an instance involving a European country’s transportation infrastructure.
The Department of State is offering a reward of up to $10 million for information on the defendants. Multiple domestic and foreign partners have issued a joint cybersecurity advisory regarding this group's activities. Estonia has also announced criminal charges against several individuals involved in similar hacking activities.
"The Justice Department stands united with our partners and allies in supporting the Ukrainian people," Olsen emphasized. He noted that National Security Division prosecutors have conducted multiple court-authorized takedowns of Russian botnets and malware networks since Russia's invasion.
Olsen concluded by thanking U.S. Attorney Barron and various FBI field offices for their dedication in disrupting these activities.