'Prolific' NetWalker extortionist pleads guilty to ransomware charges
(2022/06/29)
- Reference: 1656529475
- News link: https://www.theregister.co.uk/2022/06/29/netwalker_extortionist_pleaded_guilty/
- Source link:
A former Canadian government employee has pleaded guilty in a US court to several charges related to his involvement with the NetWalker ransomware gang.
On Tuesday, 34-year-old Sebastien Vachon-Desjardins admitted he conspired to commit computer and wire fraud, intentionally damaged a protected computer, and transmitted a demand in relation to damaging a protected computer.
He will also forfeit $21.5 million and 21 laptops, mobile phones, gaming consoles, and other devices, according to his plea agreement
[2]
Vachon-Desjardins, who faces up to 40 years behind bars, said he would "cooperate fully with the United States" as American prosecutors work to bring others involved in the ransomware crew to justice. This includes testifying against his former NetWalker affiliates.
[3]
[4]
If this cooperation qualifies as "substantial assistance," he may get off with a lighter sentence.
[5]Extradited Canadian accused of unleashing NetWalker ransomware
[6]Canadian Netwalker ransomware crook pleads guilty to million-dollar crimes
[7]We're now truly in the era of ransomware as pure extortion without the encryption
[8]AMD targeted by RansomHouse, attackers claim to have '450Gb' in stolen data
In January 2021, the US Dept of Justice said it [9]launched a coordinated international sting operation to disrupt NetWalker. At the time, security shop Chainalysis [10]estimated the ransomware code, which is offered as-a-service for criminals to rent, extorted at least $46 million from some 305 victims across 27 different countries, including 203 in the US.
As part of the NetWalker takedown, the Feds seized about $454,530 in cryptocurrency in ransom payments, disabled the crime rings' servers and dark-web blog it used to communicate with ransomware victims, and also arrested Vachons-Desjardins, who, according to the FBI, raked in [11]$27 million for the NetWalker gang.
In February, a Canadian judge [12]sentenced him to six years and eight months in prison after hge pleaded guilty to five criminal charges in Ontario's Court of Justice.
[13]
And a month later, he was [14]extradited to the US to face charges related to his involvement with the crime ring.
Vachons-Desjardins' plea agreement identified "victim 1" as a company located in Tampa, Florida, and detailed how, around April 20, 2020, he breached that organization's network security, encrypted files and deployed ransomware before dropping a ransom note indicating that the organization had been compromised by NetWalker.
The note demanded victim 1 pay $300,000 in Bitcoin, and while the organization didn't pay the criminals, it ended up spending about $1.2 million to respond to the attack and restore its operations, according to the court documents.
[15]
Other victims did pay, however, and the plea deal tied Vachons-Desjardins to the successful extortion of about 1,864 Bitcoin in ransoms, or about $21.5 million, from dozens of companies globally. ®
Get our [16]Tech Resources
[1] https://regmedia.co.uk/2022/06/29/sebastien_vachon_desjardins_netwalker_plea_agreement.pdf
[2] https://pubads.g.doubleclick.net/gampad/jump?co=1&iu=/6978/reg_security/cybercrime&sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&tile=2&c=2YrzLghJmv6Vakzn3A-iyywAAABQ&t=ct%3Dns%26unitnum%3D2%26raptor%3Dcondor%26pos%3Dtop%26test%3D0
[3] https://pubads.g.doubleclick.net/gampad/jump?co=1&iu=/6978/reg_security/cybercrime&sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&tile=4&c=44YrzLghJmv6Vakzn3A-iyywAAABQ&t=ct%3Dns%26unitnum%3D4%26raptor%3Dfalcon%26pos%3Dmid%26test%3D0
[4] https://pubads.g.doubleclick.net/gampad/jump?co=1&iu=/6978/reg_security/cybercrime&sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&tile=3&c=33YrzLghJmv6Vakzn3A-iyywAAABQ&t=ct%3Dns%26unitnum%3D3%26raptor%3Deagle%26pos%3Dmid%26test%3D0
[5] https://www.theregister.com/2022/03/11/canadian_netwalker_ransomware_extradited_america/
[6] https://www.theregister.com/2022/02/08/netwalker_ransomware_jailed/
[7] https://www.theregister.com/2022/06/25/ransomware_gangs_extortion_feature/
[8] https://www.theregister.com/2022/06/28/amd-ransomhouse-data-extortion/
[9] https://www.justice.gov/opa/pr/department-justice-launches-global-action-against-netwalker-ransomware
[10] https://blog.chainalysis.com/reports/netwalker-ransomware-disruption-arrest/
[11] https://www.theregister.com/2021/02/01/in_brief_security/
[12] https://www.theregister.com/2022/02/08/netwalker_ransomware_jailed/
[13] https://pubads.g.doubleclick.net/gampad/jump?co=1&iu=/6978/reg_security/cybercrime&sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&tile=4&c=44YrzLghJmv6Vakzn3A-iyywAAABQ&t=ct%3Dns%26unitnum%3D4%26raptor%3Dfalcon%26pos%3Dmid%26test%3D0
[14] https://www.theregister.com/2022/03/11/canadian_netwalker_ransomware_extradited_america/
[15] https://pubads.g.doubleclick.net/gampad/jump?co=1&iu=/6978/reg_security/cybercrime&sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&tile=3&c=33YrzLghJmv6Vakzn3A-iyywAAABQ&t=ct%3Dns%26unitnum%3D3%26raptor%3Deagle%26pos%3Dmid%26test%3D0
[16] https://whitepapers.theregister.com/
On Tuesday, 34-year-old Sebastien Vachon-Desjardins admitted he conspired to commit computer and wire fraud, intentionally damaged a protected computer, and transmitted a demand in relation to damaging a protected computer.
He will also forfeit $21.5 million and 21 laptops, mobile phones, gaming consoles, and other devices, according to his plea agreement
[1]PDF
, which described Vachon-Desjardins as "one of the most prolific NetWalker Ransomware affiliates" responsible for extorting said millions of dollars from dozens of companies worldwide.[2]
Vachon-Desjardins, who faces up to 40 years behind bars, said he would "cooperate fully with the United States" as American prosecutors work to bring others involved in the ransomware crew to justice. This includes testifying against his former NetWalker affiliates.
[3]
[4]
If this cooperation qualifies as "substantial assistance," he may get off with a lighter sentence.
[5]Extradited Canadian accused of unleashing NetWalker ransomware
[6]Canadian Netwalker ransomware crook pleads guilty to million-dollar crimes
[7]We're now truly in the era of ransomware as pure extortion without the encryption
[8]AMD targeted by RansomHouse, attackers claim to have '450Gb' in stolen data
In January 2021, the US Dept of Justice said it [9]launched a coordinated international sting operation to disrupt NetWalker. At the time, security shop Chainalysis [10]estimated the ransomware code, which is offered as-a-service for criminals to rent, extorted at least $46 million from some 305 victims across 27 different countries, including 203 in the US.
As part of the NetWalker takedown, the Feds seized about $454,530 in cryptocurrency in ransom payments, disabled the crime rings' servers and dark-web blog it used to communicate with ransomware victims, and also arrested Vachons-Desjardins, who, according to the FBI, raked in [11]$27 million for the NetWalker gang.
In February, a Canadian judge [12]sentenced him to six years and eight months in prison after hge pleaded guilty to five criminal charges in Ontario's Court of Justice.
[13]
And a month later, he was [14]extradited to the US to face charges related to his involvement with the crime ring.
Vachons-Desjardins' plea agreement identified "victim 1" as a company located in Tampa, Florida, and detailed how, around April 20, 2020, he breached that organization's network security, encrypted files and deployed ransomware before dropping a ransom note indicating that the organization had been compromised by NetWalker.
The note demanded victim 1 pay $300,000 in Bitcoin, and while the organization didn't pay the criminals, it ended up spending about $1.2 million to respond to the attack and restore its operations, according to the court documents.
[15]
Other victims did pay, however, and the plea deal tied Vachons-Desjardins to the successful extortion of about 1,864 Bitcoin in ransoms, or about $21.5 million, from dozens of companies globally. ®
Get our [16]Tech Resources
[1] https://regmedia.co.uk/2022/06/29/sebastien_vachon_desjardins_netwalker_plea_agreement.pdf
[2] https://pubads.g.doubleclick.net/gampad/jump?co=1&iu=/6978/reg_security/cybercrime&sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&tile=2&c=2YrzLghJmv6Vakzn3A-iyywAAABQ&t=ct%3Dns%26unitnum%3D2%26raptor%3Dcondor%26pos%3Dtop%26test%3D0
[3] https://pubads.g.doubleclick.net/gampad/jump?co=1&iu=/6978/reg_security/cybercrime&sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&tile=4&c=44YrzLghJmv6Vakzn3A-iyywAAABQ&t=ct%3Dns%26unitnum%3D4%26raptor%3Dfalcon%26pos%3Dmid%26test%3D0
[4] https://pubads.g.doubleclick.net/gampad/jump?co=1&iu=/6978/reg_security/cybercrime&sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&tile=3&c=33YrzLghJmv6Vakzn3A-iyywAAABQ&t=ct%3Dns%26unitnum%3D3%26raptor%3Deagle%26pos%3Dmid%26test%3D0
[5] https://www.theregister.com/2022/03/11/canadian_netwalker_ransomware_extradited_america/
[6] https://www.theregister.com/2022/02/08/netwalker_ransomware_jailed/
[7] https://www.theregister.com/2022/06/25/ransomware_gangs_extortion_feature/
[8] https://www.theregister.com/2022/06/28/amd-ransomhouse-data-extortion/
[9] https://www.justice.gov/opa/pr/department-justice-launches-global-action-against-netwalker-ransomware
[10] https://blog.chainalysis.com/reports/netwalker-ransomware-disruption-arrest/
[11] https://www.theregister.com/2021/02/01/in_brief_security/
[12] https://www.theregister.com/2022/02/08/netwalker_ransomware_jailed/
[13] https://pubads.g.doubleclick.net/gampad/jump?co=1&iu=/6978/reg_security/cybercrime&sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&tile=4&c=44YrzLghJmv6Vakzn3A-iyywAAABQ&t=ct%3Dns%26unitnum%3D4%26raptor%3Dfalcon%26pos%3Dmid%26test%3D0
[14] https://www.theregister.com/2022/03/11/canadian_netwalker_ransomware_extradited_america/
[15] https://pubads.g.doubleclick.net/gampad/jump?co=1&iu=/6978/reg_security/cybercrime&sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&tile=3&c=33YrzLghJmv6Vakzn3A-iyywAAABQ&t=ct%3Dns%26unitnum%3D3%26raptor%3Deagle%26pos%3Dmid%26test%3D0
[16] https://whitepapers.theregister.com/
[quote]
Vachon-Desjardins ... said he would "cooperate fully ... This includes testifying against his former NetWalker affiliates.
If this cooperation qualifies as "substantial assistance," then Vachon-Desjardins may get off with a lighter sentence.
[/quote]
Of course if his former associates murder him, a lighter sentence might not mean very much.
I see hacking attempts by criminals every day, and this is the sort of food for thought of which I like them to have plenty.