Canadian charged with running ransomware attack on US state of Alaska
(2021/12/08)
- Reference: 1638990132
- News link: https://www.theregister.co.uk/2021/12/08/canadian_man_ransomware_alaska_charged/
- Source link:
A Canadian man is accused of masterminding ransomware attacks that caused "damage" to systems belonging to the US state of Alaska.
A federal indictment against Matthew Philbert, 31, of Ottawa, was unsealed yesterday, and he was also concurrently charged by the Canadian authorities with a number of other criminal offences at the same time. US prosecutors
The Canadian Broadcasting Corporation [2]reported that Philbert was charged after a 23 month investigation "that also involved the [Royal Canadian Mounted Police, federal enforcers], the FBI and Europol."
[3]
Detective Inspector Matt Watson of the Ontario Provincial Police's Criminal Investigation Branch told Canadian journalists: "We had individuals, just individuals whose home computers were compromised. We had small, medium-sized businesses. Many of these businesses were just hanging on by their fingernails through COVID and then they get hit with a very expensive ransomware demand. That's pretty tough."
[4]
[5]
The Ottawa Citizen newspaper [6]added that Philbert's alleged modus operandi was "sending spam emails with infected attachments."
He is said to have become a suspect after the FBI contacted their Canadian counterparts following ransomware attacks in Alaska.
[7]
No specific details of the 2018 attack that prosecutors linked to Philbert were given. Canada's justice system is similar to the UK's, where precise details don't generally enter the public domain until read out in court.
American prosecutors charged the Ottawa man with one count of conspiracy to commit fraud and related activity in connection with computers, along with one count of fraud and related activity in connection with computers.
[8]Juno this ain't right! Chinese hackers target Alaska
[9]Canadian insurer paid for ransomware decryptor. Now it's hunting the scum down
[10]Ransomware freezes govt IT in Canadian territory of Nunavut, drops citizens right Inuit
Whoever was attacking the Alaskan state systems wasn't alone in 2018; that year [11]infosec firm Recorded Future linked an aggressive burst of port-scanning to China's Tsinghua University, known for its computer science research.
Meanwhile, in 2019, a ransomware attack caused headaches for [12]the remote Arctic province of Nunavut , which appeared to come from the DoppelPaymer ransomware gang.
While Canada doesn't feature too highly in lists of cyber attack targets, the country commands significant cybersecurity expertise; as well as being home to Citizen Lab, the noted human rights-oriented cybersecurity research org (based out of the University of Toronto). Its law enforcement bodies have also taken part in multinational policing operations, including [13]the Emotet botnet C2 takedown in January 2021 . ®
Get our [14]Tech Resources
[1] https://www.justice.gov/opa/press-release/file/1453901/download
[2] https://www.cbc.ca/news/canada/ottawa/ottawa-man-cybersecurity-ransomware-arrests-1.6276803
[3] https://pubads.g.doubleclick.net/gampad/jump?co=1&iu=/6978/reg_security/front&sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&tile=2&c=2YbE5JY0UaXRSQiy0PqekTQAAAEo&t=ct%3Dns%26unitnum%3D2%26raptor%3Dcondor%26pos%3Dtop%26test%3D0
[4] https://pubads.g.doubleclick.net/gampad/jump?co=1&iu=/6978/reg_security/front&sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&tile=4&c=44YbE5JY0UaXRSQiy0PqekTQAAAEo&t=ct%3Dns%26unitnum%3D4%26raptor%3Dfalcon%26pos%3Dmid%26test%3D0
[5] https://pubads.g.doubleclick.net/gampad/jump?co=1&iu=/6978/reg_security/front&sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&tile=3&c=33YbE5JY0UaXRSQiy0PqekTQAAAEo&t=ct%3Dns%26unitnum%3D3%26raptor%3Deagle%26pos%3Dmid%26test%3D0
[6] https://www.adn.com/alaska-news/crime-courts/2021/12/07/canadian-man-charged-with-cybercrimes-linked-to-2018-attack-on-state-of-alaska-computer/
[7] https://pubads.g.doubleclick.net/gampad/jump?co=1&iu=/6978/reg_security/front&sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&tile=4&c=44YbE5JY0UaXRSQiy0PqekTQAAAEo&t=ct%3Dns%26unitnum%3D4%26raptor%3Dfalcon%26pos%3Dmid%26test%3D0
[8] https://www.theregister.com/2018/08/16/china_hacks_alaska/
[9] https://www.theregister.com/2020/01/29/canadian_insurer_paid_ransomware_hunt/
[10] https://www.theregister.com/2019/11/04/ransomware_freezes_nunavut_canada/
[11] https://www.theregister.com/2018/08/16/china_hacks_alaska/
[12] https://www.theregister.com/2019/11/04/ransomware_freezes_nunavut_canada/
[13] https://www.theregister.com/2021/01/27/emotet_botnet_taken_down_europol/
[14] https://whitepapers.theregister.com/
A federal indictment against Matthew Philbert, 31, of Ottawa, was unsealed yesterday, and he was also concurrently charged by the Canadian authorities with a number of other criminal offences at the same time. US prosecutors
[1]PDF
claimed he carried out "cyber related offences" – including a specific 2018 attack on a computer in Alaska.The Canadian Broadcasting Corporation [2]reported that Philbert was charged after a 23 month investigation "that also involved the [Royal Canadian Mounted Police, federal enforcers], the FBI and Europol."
[3]
Detective Inspector Matt Watson of the Ontario Provincial Police's Criminal Investigation Branch told Canadian journalists: "We had individuals, just individuals whose home computers were compromised. We had small, medium-sized businesses. Many of these businesses were just hanging on by their fingernails through COVID and then they get hit with a very expensive ransomware demand. That's pretty tough."
[4]
[5]
The Ottawa Citizen newspaper [6]added that Philbert's alleged modus operandi was "sending spam emails with infected attachments."
He is said to have become a suspect after the FBI contacted their Canadian counterparts following ransomware attacks in Alaska.
[7]
No specific details of the 2018 attack that prosecutors linked to Philbert were given. Canada's justice system is similar to the UK's, where precise details don't generally enter the public domain until read out in court.
American prosecutors charged the Ottawa man with one count of conspiracy to commit fraud and related activity in connection with computers, along with one count of fraud and related activity in connection with computers.
[8]Juno this ain't right! Chinese hackers target Alaska
[9]Canadian insurer paid for ransomware decryptor. Now it's hunting the scum down
[10]Ransomware freezes govt IT in Canadian territory of Nunavut, drops citizens right Inuit
Whoever was attacking the Alaskan state systems wasn't alone in 2018; that year [11]infosec firm Recorded Future linked an aggressive burst of port-scanning to China's Tsinghua University, known for its computer science research.
Meanwhile, in 2019, a ransomware attack caused headaches for [12]the remote Arctic province of Nunavut , which appeared to come from the DoppelPaymer ransomware gang.
While Canada doesn't feature too highly in lists of cyber attack targets, the country commands significant cybersecurity expertise; as well as being home to Citizen Lab, the noted human rights-oriented cybersecurity research org (based out of the University of Toronto). Its law enforcement bodies have also taken part in multinational policing operations, including [13]the Emotet botnet C2 takedown in January 2021 . ®
Get our [14]Tech Resources
[1] https://www.justice.gov/opa/press-release/file/1453901/download
[2] https://www.cbc.ca/news/canada/ottawa/ottawa-man-cybersecurity-ransomware-arrests-1.6276803
[3] https://pubads.g.doubleclick.net/gampad/jump?co=1&iu=/6978/reg_security/front&sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&tile=2&c=2YbE5JY0UaXRSQiy0PqekTQAAAEo&t=ct%3Dns%26unitnum%3D2%26raptor%3Dcondor%26pos%3Dtop%26test%3D0
[4] https://pubads.g.doubleclick.net/gampad/jump?co=1&iu=/6978/reg_security/front&sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&tile=4&c=44YbE5JY0UaXRSQiy0PqekTQAAAEo&t=ct%3Dns%26unitnum%3D4%26raptor%3Dfalcon%26pos%3Dmid%26test%3D0
[5] https://pubads.g.doubleclick.net/gampad/jump?co=1&iu=/6978/reg_security/front&sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&tile=3&c=33YbE5JY0UaXRSQiy0PqekTQAAAEo&t=ct%3Dns%26unitnum%3D3%26raptor%3Deagle%26pos%3Dmid%26test%3D0
[6] https://www.adn.com/alaska-news/crime-courts/2021/12/07/canadian-man-charged-with-cybercrimes-linked-to-2018-attack-on-state-of-alaska-computer/
[7] https://pubads.g.doubleclick.net/gampad/jump?co=1&iu=/6978/reg_security/front&sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&tile=4&c=44YbE5JY0UaXRSQiy0PqekTQAAAEo&t=ct%3Dns%26unitnum%3D4%26raptor%3Dfalcon%26pos%3Dmid%26test%3D0
[8] https://www.theregister.com/2018/08/16/china_hacks_alaska/
[9] https://www.theregister.com/2020/01/29/canadian_insurer_paid_ransomware_hunt/
[10] https://www.theregister.com/2019/11/04/ransomware_freezes_nunavut_canada/
[11] https://www.theregister.com/2018/08/16/china_hacks_alaska/
[12] https://www.theregister.com/2019/11/04/ransomware_freezes_nunavut_canada/
[13] https://www.theregister.com/2021/01/27/emotet_botnet_taken_down_europol/
[14] https://whitepapers.theregister.com/
Revolting!
Throatwarbler Mangrove
How dare the multinational governmental cabal stand in the way of this upstanding entrepreneur, who was just promoting his small, independent security business by highlighting the incompetence of Big Gubbermint IT! It's the rise of fascism, I tell ya!
Re: Revolting!
Yet Another Anonymous coward
I want to know how he got good enough internet in Canada to become a cyber criminal
msobkow
Every nation has its miscreants. My homeland of Canada is no different. You'll find the "me first; who cares about you " crowd in abundance here, and the difference between this fellow and the majority of such people is that he had some technical know-how and an utter lack of concscience or morality.
Remember: For every Pope or Dalai Llama in the world, there is a Stalin and a Drumpf. :P
federal enforcers
That's the first time I've heard the RCMP being called federal enforcers. Sounds pretty good, eh.