Canadian Man Extradited to US Over Cryptojacking Scheme Targeting University Supercomputers
A Canadian national, Ryan James Roach (35), was extradited to the United States on October 28 to face federal charges related to a long-running hacking campaign that compromised university supercomputers to mine cryptocurrency. He is charged alongside co-defendant Mathiew James Stubbings (41), of Ontario, whose extradition proceedings in Canada are ongoing. According to the DoJ, the pair operated from June 2016 to December 2019, hacking into computers at educational institutions in New York, Tennessee, North Carolina, and Massachusetts, stealing credentials, and hijacking processing power for crypto-mining.
Detalhes técnicos
Prosecutors allege the defendants used virtual private servers registered under false names across multiple countries to distribute malware and mining software, and to store stolen credentials. They reportedly scanned victim networks for vulnerabilities, used compromised machines and servers from prior victims to obscure their tracks, and performed lateral movement and reconnaissance using unspecified "sophisticated techniques and tools" once inside target networks. The indictment alleges at least 10 protected computers were damaged in a single year, with losses exceeding $5,000.
Remediação
The article notes universities remain high-value targets due to powerful computing resources, broad network access, and large user populations. Recommended defensive measures include prompt patching, monitoring for anomalous CPU/processing load (a cryptojacking indicator), and treating credential theft as a serious incident requiring full investigation rather than a minor nuisance.
Linha do tempo
-
Canadian Man Extradited to US Over Cryptojacking Scheme Targeting University Supercomputers
ler a análise desta fonte ocultar
A Canadian national, Ryan James Roach (35), was extradited to the United States on October 28 to face federal charges related to a long-running hacking campaign that compromised university supercomputers to mine cryptocurrency. He is charged alongside co-defendant Mathiew James Stubbings (41), of Ontario, whose extradition proceedings in Canada are ongoing. According to the DoJ, the pair operated from June 2016 to December 2019, hacking into computers at educational institutions in New York, Tennessee, North Carolina, and Massachusetts, stealing credentials, and hijacking processing power for crypto-mining.
Technical Details
Prosecutors allege the defendants used virtual private servers registered under false names across multiple countries to distribute malware and mining software, and to store stolen credentials. They reportedly scanned victim networks for vulnerabilities, used compromised machines and servers from prior victims to obscure their tracks, and performed lateral movement and reconnaissance using unspecified "sophisticated techniques and tools" once inside target networks. The indictment alleges at least 10 protected computers were damaged in a single year, with losses exceeding $5,000.
Remediation
The article notes universities remain high-value targets due to powerful computing resources, broad network access, and large user populations. Recommended defensive measures include prompt patching, monitoring for anomalous CPU/processing load (a cryptojacking indicator), and treating credential theft as a serious incident requiring full investigation rather than a minor nuisance.