Kiberjinoyat
Kanadalik universitet superkompyuterlarini kriptomayning bilan buzganligi uchun AQShga ekstraditsiya qilindi
Federal katta hay'at ikki kanadalik erkakni Amerika universitetlari superkompyuterlarini yashirincha Electroneum kriptovalyutasini qazish uchun egallab olishda aybladi.
Muallif: Eduard Kovacs
| 2026-yil 4-noyabr (ET 8:27)
Ikki kanadalik erkak Nyu-Yorkda federal sudga tortiladi, chunki ular Amerika universitetlari bo'ylab ko'p yillik kiber hujum kampaniyasini uyushtirganlikda ayblanmoqda. Ular kompyuter resurslarini yashirincha kriptovalyuta qazish uchun egallab olishgan.
Federal katta hay'at 35 yoshli Saskachevanlik Rayyan Jeyms Roach va 41 yoshli Ontariolik Metyu Jeyms Stubbingsni himoyalangan kompyuterlardan ma'lumot olish va ularga zarar yetkazish maqsadida til biriktirish, himoyalangan kompyuterdan ma'lumot olish va qasddan kompyuterga zarar yetkazish ayblovlari bilan aybladi.
Roach 28-oktabrda Kanadadan AQShga ekstraditsiya qilindi, Stubbingsga nisbatan esa ekstraditsiya jarayoni Kanada sudlarida davom etmoqda.
Ayblovga ko'ra, hujumlar 2016-yil iyunidan 2019-yil dekabrigacha davom etgan va Nyu-York, Massachusets, Shimoliy Karolina va Tennessi shtatlaridagi akademik muassasalar tizimlarini buzgan.
Ular kampaniyani boshqarish uchun soxta shaxslar yordamida ko'p mamlakatli virtual xususiy server infratuzilmasini o'rnatgan. "Bu serverlar zararli dasturlar va qazish dasturlarini jabrlanuvchi kompyuterlarga yuborgan va o'g'irlangan kirish ma'lumotlarini saqlagan", deb tushuntirdi Adliya vazirligi.
Tahdid ishtirokchilari ayniqsa superkompyuterlar saqlaydigan kampuslarni nishonga olgan va avval buzilgan mashinalarni o'z manbalarini yashirish uchun sakrash nuqtasi sifatida ishlatgan.
Reklama. O'qishni davom ettirish uchun pastga aylantiring.
Kanada sud hujjatlarida aytilishicha, egallab olingan universitet apparatlari Electroneum deb nomlangan kriptovalyutani qazish uchun qayta ishlatilgan.
"Tarmoqqa kirgach, Roach va Stubbings tarmoq ichida tanishuv o'tkazish va kirish huquqini kengaytirish uchun murakkab usullar va vositalardan foydalangan", deb ta'kidladi prokurorlar.
Agar aybdor deb topilsa, har bir ayblov bo'yicha maksimal 10 yil qamoq va 250 000 dollar jarima jazosi beriladi.
Bog'liq: FBI Shimoliy Koreyaning Binance o'g'riligiga aloqador 600 dan ortiq manzillarni aniqladi
Bog'liq: Suriyalik xaker AQShda o'n yildan ortiq qochqinlikdan so'ng qamoq jazosiga hukm qilindi
Bog'liq: O'q o'tkazmas xost Virtualine domenini FBI musodara qilishi natijasida yo'qotdi
Yozgan: Eduard Kovacs
Eduard Kovacs (@EduardKovacs) SecurityWeek'da katta boshqaruvchi muharrir. U jurnalistika karerasini 2011-yilda boshlashdan oldin o'rta maktabda IT o'qituvchisi bo'lib ishlagan. Eduard sanoat informatikasi bo'yicha bakalavr darajasiga va elektr muhandisligida kompyuter texnikalari bo'yicha magistr darajasiga ega.
Kundalik axborot byulleteni
So'nggi kiberxavfsizlik tahdidlari, tendentsiyalar va mutaxassis fikrlari haqida xabardor bo'lish uchun SecurityWeek elektron pochta axborotiga obuna bo'ling.
Biznes elektron pochta*
emailsignupsource
Qo'shimcha ma'lumot uchun Maxfiylik siyosatimizni o'qing.
Eduard Kovacsdan ko'proq
- NATO'ning Crossed Swords mashqlari kiberoperatsiyalarni o'rgatishda AI agentlarini jalb qiladi
- 100 dan ortiq Yevropa do'konlari supermarket sovutgich hujumlari qaytishi natijasida zararlangan
- Kiberxavfsizlik M&A xulosasi: 2026-yil oktyabrda 37 ta bitim e'lon qilindi
- Florida talaba yordam veb-sayti buzilishi 4,9 million kishining ma'lumotlarini xavf ostiga qo'yadi
- Polymarket DNS o'g'irlanishi deb DebugBear aytganidek, savdogarlarga 3,9 million dollarni qaytaradi
- FBI Shimoliy Koreyaning Binance o'g'riligiga aloqador 600 dan ortiq manzillarni aniqladi
- Ivanti Connect Secure hujum zanjirida ishlatilgan yana ikkita nol kun zaifligini tuzatdi
- Suriyalik xaker AQShda o'n yildan ortiq qochqinlikdan so'ng qamoq jazosiga hukm qilindi
So'nggi yangiliklar
- OpsShield ta'minot zanjiri hujumida zararli cPGuard yangilanishlari tarqatildi
- Chrome 157 213 ta xavfsizlik tuzatishi bilan chiqdi, yettitasi jiddiy deb baholandi
- Rigged kodlash topshirig'i, suiiste'mol qilingan AI vositasi 6 milliard dollarlik Binance o'g'riligiga yo'l ochdi
- Shimoliy Koreya AQShning Binance o'g'riligi haqidagi da'volariga qarshi dengizga raketalar uchirdi
- Meta Muse xatolik mukofoti topilmalarini e'lon qildi, to'lovlar 1,2 million dollarga yetdi
- Frontline Education ma'lumotlar buzilishi kamida 1,3 million kishiga ta'sir qildi
- CrowdStrike AI xavfsizlik firmalari Fiddler va Dreadnode uchun 495 million dollar to'layotgani xabar qilindi
- Android'ning 2026-yil noyabr yangilanishlari 200 dan ortiq zaiflikni tuzatdi
Trendda
Zararli Claude Code kengaytmasi Cursor ta'minot zanjiri hujumida tarqatildi
CrowdStrike AI xavfsizlik firmalari Fiddler va Dreadnode uchun 495 million dollar to'layotgani xabar qilindi
enSilo B seriyasida 23 million dollar mablag' yig'di
Revolve ma'lumotlar buzilishi kamida 200 000 kishiga ta'sir qildi
100 dan ortiq Yevropa do'konlari supermarket sovutgich hujumlari qaytishi natijasida zararlangan
FBI Shimoliy Koreyaning Binance o'g'riligiga aloqador 600 dan ortiq manzillarni aniqladi
Ivanti Connect Secure hujum zanjirida ishlatilgan yana ikkita nol kun zaifligini tuzatdi
Kiberxavfsizlik M&A xulosasi: 2026-yil oktyabrda 37 ta bitim e'lon qilindi
Kundalik axborot byulleteni
So'nggi tahdidlar, tendentsiyalar va texnologiyalar haqida xabardor bo'lish, shuningdek, soha mutaxassislarining chuqur fikrlarini olish uchun SecurityWeek elektron pochta axborotiga obuna bo'ling.
Vebinar: Agentik pentesting kuchliroq CTEM dasturi uchun
2026-yil 4-noyabr
Pentestlar orasidagi xavfsizlik bo'shliqlarini yoping. Ushbu sessiyaga qo'shiling va agentik pentestingni o'rganing hamda CTEM dasturingizda uzluksiz ta'sirni tekshirish uchun amaliy asosga ega bo'ling.
Ro'yxatdan o'ting
Virtual tadbir: CISO Forum 2026 sammiti
2026-yil 10 va 11-noyabr
Biz CISO'lar, yuqori darajadagi kiberxavfsizlik rahbarlari, amaliyotchilar, soha mutaxassislari va boshqa xavfsizlik yetakchilarini birlashtiramiz, ular amaliy tajribani almashish va korporativ kiberxavfsizlik strategiyasini shakllantiruvchi masalalarni ko'rib chiqish uchun.
Ro'yxatdan o'ting
Harakatdagi odamlar
Barracuda Dan Fletcher'ni moliyaviy direktor etib tayinladi.
Artemis Security Arun Singh'ni o'sish bo'yicha bosh direktor etib tayinladi.
General Pol M. Nakasone Armadin direktorlar kengashiga qo'shildi.
Harakatdagi ko'proq odamlar
Mutaxassis fikrlari
Parollar parollardan yaxshiroq. Lekin ular yetarli emas.
Tashkilotlar parollarni yo'q qilgach, hujumchilar moslashadi. Ular autentifikatorni to'g'ridan-to'g'ri hujum qilish o'rniga, uning atrofidagi imkoniyatlarni qidiradi. (Torsten George)
Xavf shaxsiy bo'lganda: Xavfsizlik yetakchilari saraton tashxisidan nimani o'rganishi mumkin
Xavf menejerlari zaif signallarni aniqlash, uzilishlarga tayyorgarlik ko'rish va noaniqlik sharoitida qiyin qarorlar qabul qilishga o'rgatilgan. Ammo bu intizom tizim yoki korxona emas, balki siz bo'lganda boshqacha ko'rinadi. (Stiv Durbin)
Hech kim xavfsizlik so'rovnomasiga ishonmaydi. Shunga qaramay, biz unga tayanamiz.
Deyarli har bir B2B bitimni nazorat qiladigan jarayon yuboruvchining o'zi ishonmaydigan va qabul qiluvchining qabul qiladigan o'z-o'zini baholashidir. Nihoyat, kompaniyalar o'rtasida ishonch uchun yaxshiroq asos paydo bo'ldi. (Sravish Sridhar)
Bu normal: NetScaler nol kun zaifliklari bizga yangi normal haqida nimani aytadi
Agar Citrix NetScaler tuzatishlari tez orada yana bir turkum chiqarilsa, tuzatish quvurlarini tayyor saqlang. (Tod Beardsli)
AI dasturiy ta'minot xavfsizligining kaliti tezlik emas, balki yetuklikdir
Sizning ishlab chiquvchilaringiz AI qabul qilish shkalasida qayerda joylashgani xavfsizlik xavfini qanday hal qilayotganingizga haqiqiy ta'sir qiladi. (Matias Madou)
Cybercrime
Canadian Extradited to US Over Cryptomining Hacks on University Supercomputers
A federal grand jury indicted two Canadian men for hijacking university supercomputers to secretly mine Electroneum cryptocurrency.
By
Eduard Kovacs
| November 4, 2026 (8:27 AM ET)
*
Two Canadian men face federal prosecution in New York after allegedly orchestrating a multi-year cyber incursion campaign that hijacked computing resources across American universities to secretly mine cryptocurrency.
A federal grand jury indicted Ryan James Roach, 35, of Saskatchewan, and Mathiew James Stubbings, 41, of Ontario, on charges of conspiracy to obtain information and cause damage to protected computers, obtaining information from a protected computer, and intentional computer damage.
Roach was extradited from Canada on October 28, while extradition proceedings against Stubbings remain underway before Canadian courts.
According to the indictment, the intrusions spanned from June 2016 through December 2019, compromising systems at academic institutions in New York, Massachusetts, North Carolina, and Tennessee.
The two allegedly set up multi-country virtual private server infrastructure using fraudulent identities to manage the campaign. “These servers transmitted malware and mining software to victim computers and stored stolen login credentials,” the DOJ explained.
The threat actors specifically singled out campuses maintaining supercomputers, using previously compromised machines as pivot points to conceal their origins.
Advertisement. Scroll to continue reading.
Canadian court filings revealed that the hijacked university hardware was repurposed to mine a cryptocurrency called Electroneum.
“Once inside a network, Roach and Stubbings used sophisticated techniques and tools to conduct reconnaissance and expand their access within the network,” prosecutors stated.
If convicted, the offenses carry a maximum statutory penalty of 10 years in prison and a $250,000 fine on each count.
Related: FBI Flags Over 600 Addresses Tied to North Korea’s Binance Heist
Related: Syrian Hacker Gets Prison Time in US After Over a Decade on the Run
Related: Bulletproof Host Virtualine Loses Its Domain to FBI Seizure
Written ByEduard Kovacs
Eduard Kovacs (@EduardKovacs) is senior managing editor at SecurityWeek. He worked as a high school IT teacher before starting a career in journalism in 2011. Eduard holds a bachelor’s degree in industrial informatics and a master’s degree in computer techniques applied in electrical engineering.
Daily Briefing Newsletter
Subscribe to the SecurityWeek Email Briefing for the latest cybersecurity threats, trends, and expert insights.
Business Email*
emailsignupsource
Read our Privacy Policy for more information.
More from Eduard Kovacs
- NATO’s Crossed Swords Exercise Brings AI Agents Into Cyber Operations Training
- Over 100 European Stores Hit as Supermarket Fridge Attacks Return
- Cybersecurity M&A Roundup: 37 Deals Announced in October 2026
- Florida Student Aid Website Hack Puts Data of 4.9 Million People at Risk
- Polymarket Returns $3.9 Million to Traders as DebugBear Cites DNS Hijack
- FBI Flags Over 600 Addresses Tied to North Korea’s Binance Heist
- Ivanti Patches Two More Zero-Days Exploited in Connect Secure Attack Chain
- Syrian Hacker Gets Prison Time in US After Over a Decade on the Run
Latest News
- Malicious cPGuard Updates Served in OpsShield Supply Chain Attack
- Chrome 157 Rolls Out With 213 Security Fixes, Seven Rated Critical
- Rigged Coding Assignment, Abused AI Tool Opened Path to $6 Billion Binance Heist
- North Korea Launches Missiles Toward the Sea as Pyongyang Protests Against US Claims on Binance Hack
- Meta Shares Top Muse Bug Bounty Findings as Payouts Reach $1.2 Million
- Frontline Education Data Breach Impacts Over 1.3 Million
- CrowdStrike Reportedly Paying $495 Million for AI Security Firms Fiddler, Dreadnode
- Android’s November 2026 Updates Patch Over 200 Vulnerabilities
Trending
Malicious Claude Code Extension Served in Cursor Supply Chain Attack
CrowdStrike Reportedly Paying $495 Million for AI Security Firms Fiddler, Dreadnode
enSilo Raises $23 Million in Series B Funding
Revolve Data Breach Impacts at Least 200,000 People
Over 100 European Stores Hit as Supermarket Fridge Attacks Return
FBI Flags Over 600 Addresses Tied to North Korea’s Binance Heist
Ivanti Patches Two More Zero-Days Exploited in Connect Secure Attack Chain
Cybersecurity M&A Roundup: 37 Deals Announced in October 2026
Daily Briefing Newsletter
Subscribe to the SecurityWeek Email Briefing to stay informed on the latest threats, trends, and technology, along with insightful columns from industry experts.
Webinar: Agentic Pentesting for a Stronger CTEM Program
November 4, 2026
Close the security gaps between pentests. Join this session to explore agentic pentesting and gain a practical framework for continuous exposure validation in your CTEM program.
Register
Virtual Event: CISO Forum 2026 Summit
November 10 & 11, 2026
Join as we bring together CISOs, senior cybersecurity executives, practitioners, industry experts, and other security leaders to share practical experience and examine the issues shaping enterprise cybersecurity strategy.
Register
People on the Move
Barracuda has appointed Dan Fletcher as CFO.
Artemis Security has appointed Arun Singh as CGO.
General Paul M. Nakasone has joined Armadin’s Board of Directors.
More People On The Move
Expert Insights
*
Passkeys Are Better Than Passwords. But They Are Not Enough.
As organizations eliminate passwords, attackers will adapt. Instead of attacking the authenticator directly, they will look for opportunities around it.(Torsten George)
When Risk Becomes Personal: What Security Leaders Can Learn From a Cancer Diagnosis
Risk managers are trained to spot weak signals, plan for disruption and make hard decisions under uncertainty. But the discipline looks different when the risk is not a system or an enterprise, but you.(Steve Durbin)
Nobody Trusts the Security Questionnaire. We Rely on It Anyway.
The process that gates nearly every B2B deal is a self-assessment the sender distrusts and the receiver accepts. There is finally a better basis for trust between companies.(Sravish Sridhar)
This is Fine: What NetScaler Zero-Days Tell Us About the New Normal
Keep your patch management pipelines primed in case another round of Citrix NetScaler patches get released soon.(Tod Beardsley)
The Key to AI Software Security Isn’t Speed, It’s Maturity
Where your developers sit on the AI adoption scale has a real impact on how you are addressing security risk.(Matias Madou)