According to BlockBeats, on May 23, the U.S. Department of Justice filed a civil forfeiture lawsuit seeking to seize over $24 million in cryptocurrency held by Russian citizen Rustam Rafailevich Gallyamov. Gallyamov is accused of developing the Qakbot malware.

The indictment shows that Gallyamov has been operating the Qakbot malware since 2008, infecting thousands of computers to create a botnet in 2019, and selling access to ransomware gangs. These gangs used ransomware such as Prolock, Dopplepaymer, and REvil to carry out attacks.

In a 2023 international operation, U.S. authorities seized 170 bitcoins and over $4 million in stablecoins held by Gallyamov. Gallyamov and his accomplices subsequently adopted new technologies, directly deploying Black Basta and Cactus ransomware to continue their criminal activities.