FBI Most Wanted Russian Hacker In The World

Summary

Maksim Yakubets, known by the alias Aqua, is the leader of the infamous cybercriminal group Evil Corp, responsible for stealing hundreds of millions of dollars through sophisticated ransomware and malware attacks like Dridex and WastedLocker. Despite being one of the FBI's most-wanted criminals, Yakubets remains untouchable, thanks to his protection in Russia. His extravagant lifestyle and connections to high-ranking Russian officials fuel suspicions that he operates with government backing. This gripping tale explores Yakubets’ criminal empire, his evasion of justice, and the potential ties between cybercrime and state interests in Russia.

Takeaways

• 😀 Maksim Yakubets, known by his hacker alias 'Aqua,' is the leader of the cybercriminal gang, Evil Corp.
• 😀 Evil Corp is responsible for several major cyberattacks, including the Dridex malware campaign, which stole over $100 million.
• 😀 In 2009, Yakubets and his group used the Zeus Trojan to infiltrate a Kentucky county's bank account, initiating their cybercriminal activities.
• 😀 Despite tracing Yakubets' identity through his email address, the investigation was hindered by Russia's refusal to cooperate, allowing Yakubets to remain free.
• 😀 Dridex, a malware that targeted Windows users, spread via spam emails and stole sensitive banking information through keyloggers.
• 😀 Yakubets and Evil Corp later expanded their operations to include ransomware like Locky and Bit Paymer, which targeted businesses and hospitals.
• 😀 In 2019, Yakubets was sanctioned by the US Treasury Department, with a $5 million bounty placed on his head by the FBI.
• 😀 Yakubets remains untouchable due to his base in Russia, where he is shielded by connections to high-ranking officials, including his father-in-law, a former FSB officer.
• 😀 Despite being a wanted criminal, Yakubets lives a lavish lifestyle, with luxury cars and exotic animals, flaunting his wealth in front of the authorities.
• 😀 Rumors suggest that Russian intelligence may be indirectly supporting Evil Corp, seeing them as a useful resource for cyber operations that don't target Russian interests.
• 😀 Yakubets' escape from justice highlights the challenges of international law enforcement in combating cybercrime, especially when criminals are protected by powerful connections in their home country.

Q & A

Who is Maksim Yakubets and what is his hacker alias?

Maksim Yakubets is a Russian cybercriminal, and his hacker alias is 'Aqua'. He is the leader of the infamous cybercrime group, Evil Corp.

What is the role of Evil Corp in cybercrime?

Evil Corp, led by Maksim Yakubets, is responsible for multiple large-scale cyberattacks, including ransomware campaigns like Dridex, Locky, and WastedLocker. The group has stolen millions of dollars from individuals, banks, and institutions.

What was the first major cybercrime attributed to Yakubets' group?

The first major cybercrime attributed to Yakubets' group was the 2009 attack on Bullitt County Treasurer's PC, where hackers used the Zeus Trojan to steal login information and transfer money from the county's bank account.

How did Yakubets' email address lead to his identification?

In 2010, investigators traced an email address tied to the hacker Aqua, which was linked to Maksim Yakubets. This discovery was made because Yakubets used the same email to order a stroller for his baby, leading to a search of his home in Russia.

What is the Dridex malware, and how did it affect users?

Dridex, also known as Bugat, is a multifunctional malware targeting Windows users. It spreads via email attachments and injects a keylogger to steal sensitive data like banking credentials and login details. The malware was responsible for major financial theft, especially in the UK and the US.

What was the impact of the Dridex attacks on the UK and US?

In 2014, the Dridex malware attack caused an estimated loss of 20 million pounds in the UK and 10 million dollars in the US. The malware spread through 15,000 daily spam emails.

How did Evil Corp continue its operations after Dridex?

After Dridex, Evil Corp introduced additional malware strains like Locky and Bit Paymer, continuing their criminal activities. They targeted large companies, demanding huge ransoms, such as the 230,000-pound ransom from UK hospitals in 2017.

What legal actions have been taken against Yakubets and Evil Corp?

In 2019, Yakubets and Evil Corp were sanctioned by the US Treasury Department. Yakubets was also placed on the FBI's most wanted list, and the US Department of Justice charged him and other hackers from Evil Corp with criminal violations.

How did Yakubets' lifestyle reflect his criminal success?

Maksim Yakubets flaunts his criminal wealth with an extravagant lifestyle, owning a $200,000 Lamborghini, exotic pets like tigers, and expensive vacations. He also made headlines by driving his Lamborghini with a custom license plate that reads 'Thief'.

Why is Yakubets so difficult for authorities to apprehend?

Yakubets is protected within Russia, where he is believed to have connections with high-ranking officials, including his father-in-law, a former FSB officer. This protection, along with Russia's reluctance to cooperate with foreign investigations, makes it nearly impossible for US authorities to arrest him.