U.S. Department of Justice seizes $24 million in cryptocurrency assets from Qakbot developer

The U.S. Department of Justice has filed a civil forfeiture lawsuit against Russian citizen Rustam Rafailevich Gallyamov, who is suspected of developing the malicious software Qakbot, seeking to confiscate cryptocurrency valued at $24 million. Gallyamov has been operating this malware since 2008 and created a botnet by infecting thousands of computers in 2019. Matthew Galeotti, head of the criminal division of the Department of Justice, stated that this action demonstrates a commitment to using legal means to hold cybercriminals accountable. In a 2023 international operation, the U.S. targeted the Qakbot network, seizing 170 bitcoins and $4 million in stablecoins. The indictment shows that the defendant continued to use ransomware such as Black Basta after changing strategies. Access to the Qakbot botnet had previously been sold to perpetrators of several global ransomware attacks, including Conti and REvil.