The original text is in EN, taken from the source site. Source ↗

Cybercrime

Canadian Extradited to US Over Cryptomining Hacks on University Supercomputers

A federal grand jury indicted two Canadian men for hijacking university supercomputers to secretly mine Electroneum cryptocurrency.

By

Eduard Kovacs

| November 4, 2026 (8:27 AM ET)

*

  • Flipboard
  • Reddit
  • Whatsapp
  • Whatsapp
  • Email

Two Canadian men face federal prosecution in New York after allegedly orchestrating a multi-year cyber incursion campaign that hijacked computing resources across American universities to secretly mine cryptocurrency.

A federal grand jury indicted Ryan James Roach, 35, of Saskatchewan, and Mathiew James Stubbings, 41, of Ontario, on charges of conspiracy to obtain information and cause damage to protected computers, obtaining information from a protected computer, and intentional computer damage.

Roach was extradited from Canada on October 28, while extradition proceedings against Stubbings remain underway before Canadian courts.

According to the indictment, the intrusions spanned from June 2016 through December 2019, compromising systems at academic institutions in New York, Massachusetts, North Carolina, and Tennessee.

The two allegedly set up multi-country virtual private server infrastructure using fraudulent identities to manage the campaign. “These servers transmitted malware and mining software to victim computers and stored stolen login credentials,” the DOJ explained.

The threat actors specifically singled out campuses maintaining supercomputers, using previously compromised machines as pivot points to conceal their origins.

Advertisement. Scroll to continue reading.

Canadian court filings revealed that the hijacked university hardware was repurposed to mine a cryptocurrency called Electroneum.

“Once inside a network, Roach and Stubbings used sophisticated techniques and tools to conduct reconnaissance and expand their access within the network,” prosecutors stated.

If convicted, the offenses carry a maximum statutory penalty of 10 years in prison and a $250,000 fine on each count.

Related: FBI Flags Over 600 Addresses Tied to North Korea’s Binance Heist

Related: Syrian Hacker Gets Prison Time in US After Over a Decade on the Run

Related: Bulletproof Host Virtualine Loses Its Domain to FBI Seizure

Written ByEduard Kovacs

Eduard Kovacs (@EduardKovacs) is senior managing editor at SecurityWeek. He worked as a high school IT teacher before starting a career in journalism in 2011. Eduard holds a bachelor’s degree in industrial informatics and a master’s degree in computer techniques applied in electrical engineering.

Daily Briefing Newsletter

Subscribe to the SecurityWeek Email Briefing for the latest cybersecurity threats, trends, and expert insights.

Business Email*

emailsignupsource

Read our Privacy Policy for more information.

More from Eduard Kovacs

  • NATO’s Crossed Swords Exercise Brings AI Agents Into Cyber Operations Training
  • Over 100 European Stores Hit as Supermarket Fridge Attacks Return
  • Cybersecurity M&A Roundup: 37 Deals Announced in October 2026
  • Florida Student Aid Website Hack Puts Data of 4.9 Million People at Risk
  • Polymarket Returns $3.9 Million to Traders as DebugBear Cites DNS Hijack
  • FBI Flags Over 600 Addresses Tied to North Korea’s Binance Heist
  • Ivanti Patches Two More Zero-Days Exploited in Connect Secure Attack Chain
  • Syrian Hacker Gets Prison Time in US After Over a Decade on the Run

Latest News

  • Malicious cPGuard Updates Served in OpsShield Supply Chain Attack
  • Chrome 157 Rolls Out With 213 Security Fixes, Seven Rated Critical
  • Rigged Coding Assignment, Abused AI Tool Opened Path to $6 Billion Binance Heist
  • North Korea Launches Missiles Toward the Sea as Pyongyang Protests Against US Claims on Binance Hack
  • Meta Shares Top Muse Bug Bounty Findings as Payouts Reach $1.2 Million
  • Frontline Education Data Breach Impacts Over 1.3 Million
  • CrowdStrike Reportedly Paying $495 Million for AI Security Firms Fiddler, Dreadnode
  • Android’s November 2026 Updates Patch Over 200 Vulnerabilities

Trending

Malicious Claude Code Extension Served in Cursor Supply Chain Attack

CrowdStrike Reportedly Paying $495 Million for AI Security Firms Fiddler, Dreadnode

enSilo Raises $23 Million in Series B Funding

Revolve Data Breach Impacts at Least 200,000 People

Over 100 European Stores Hit as Supermarket Fridge Attacks Return

FBI Flags Over 600 Addresses Tied to North Korea’s Binance Heist

Ivanti Patches Two More Zero-Days Exploited in Connect Secure Attack Chain

Cybersecurity M&A Roundup: 37 Deals Announced in October 2026

Daily Briefing Newsletter

Subscribe to the SecurityWeek Email Briefing to stay informed on the latest threats, trends, and technology, along with insightful columns from industry experts.

Webinar: Agentic Pentesting for a Stronger CTEM Program

November 4, 2026

Close the security gaps between pentests. Join this session to explore agentic pentesting and gain a practical framework for continuous exposure validation in your CTEM program.

Register

Virtual Event: CISO Forum 2026 Summit

November 10 & 11, 2026

Join as we bring together CISOs, senior cybersecurity executives, practitioners, industry experts, and other security leaders to share practical experience and examine the issues shaping enterprise cybersecurity strategy.

Register

People on the Move

Barracuda has appointed Dan Fletcher as CFO.

Artemis Security has appointed Arun Singh as CGO.

General Paul M. Nakasone has joined Armadin’s Board of Directors.

More People On The Move

Expert Insights

*

  • Flipboard
  • Reddit
  • Whatsapp
  • Whatsapp
  • Email

Passkeys Are Better Than Passwords. But They Are Not Enough.

As organizations eliminate passwords, attackers will adapt. Instead of attacking the authenticator directly, they will look for opportunities around it.(Torsten George)

When Risk Becomes Personal: What Security Leaders Can Learn From a Cancer Diagnosis

Risk managers are trained to spot weak signals, plan for disruption and make hard decisions under uncertainty. But the discipline looks different when the risk is not a system or an enterprise, but you.(Steve Durbin)

Nobody Trusts the Security Questionnaire. We Rely on It Anyway.

The process that gates nearly every B2B deal is a self-assessment the sender distrusts and the receiver accepts. There is finally a better basis for trust between companies.(Sravish Sridhar)

This is Fine: What NetScaler Zero-Days Tell Us About the New Normal

Keep your patch management pipelines primed in case another round of Citrix NetScaler patches get released soon.(Tod Beardsley)

The Key to AI Software Security Isn’t Speed, It’s Maturity

Where your developers sit on the AI adoption scale has a real impact on how you are addressing security risk.(Matias Madou)