Connect with us

Published

on

US DOJ seizes M in crypto from accused Qakbot malware developer

The US Department of Justice (DOJ) has filed a civil forfeiture complaint to seize more than $24 million in cryptocurrency from Rustam Rafailevich Gallyamov, a Russian national accused of developing the Qakbot malware.

According to a May 22 announcement, the DOJ unsealed charges against the 48-year-old Moscovite with a federal indictment. Gallyamov is allegedly the malware developer behind the Qakbot botnet.

“Today’s announcement of the Justice Department’s latest actions to counter the Qakbot malware scheme sends a clear message to the cybercrime community,” said Matthew Galeotti, head of the DOJ’s criminal division.

US DOJ seizes $24M in crypto from accused Qakbot malware developer
Screenshot of the indictment. Source: US Department of Justice

Galeotti highlighted that the DOJ is “determined to hold cybercriminals accountable.” He added that the department will “use every legal tool” to “identify you, charge you, forfeit your ill-gotten gains, and disrupt your criminal activity.”

Related: Microsoft takes legal action against infostealer Lumma

Over $24 million forfeited

US Attorney Bill Essayli for the Central District of California explained that “the criminal charges and forfeiture case announced today are part of an ongoing effort” to “identify, disrupt, and hold accountable cybercriminals.” He added:

“The forfeiture action against more than $24 million in virtual assets also demonstrates the Justice Department’s commitment to seizing ill-gotten assets from criminals in order to ultimately compensate victims.”

Assistant Director in Charge Akil Davis of the FBI’s Los Angeles Field Office said that Qakbot was crippled by the agency and its partners in 2023. Still, Gallyamov allegedly continued deploying alternative methods to offer his malware to potential partners.

Related: Chinese printer maker spread Bitcoin stealing malware — Report

Qakbot used in global ransomware attacks

Gallyamov allegedly operated the Qakbot malware as far back as 2008. In 2019, he allegedly used it to infect thousands of victim computers to establish a so-called botnet.

Access to computers that were part of the botnet was sold to others who infected them with ransomware, including Prolock, Dopplepaymer, Egregor, REvil, Conti, Name Locker, Black Bast and Cactus. In 2023, a US-led international operation disrupted the Qakbot botnet and malware.

At the time, over 170 Bitcoin (BTC) and over $4 million in USDt (USDT) and USDC (USDC) stablecoins were seized from Gallyamov. According to the indictment, he and his collaborators continued the activity after it was disrupted, adopting new techniques, including directly deploying Black Basta and Cactus ransomware.

Magazine: Report on Crypto Exchange Hacks

Continue Reading

Politics

US bank regulator clears national banks to facilitate crypto transactions

Published

on

By

US bank regulator clears national banks to facilitate crypto transactions

The US Office of the Comptroller of the Currency has affirmed that national banks can intermediate cryptocurrency trades as riskless principals without holding the assets on their balance sheets, a move that brings traditional banks a step closer to offering regulated crypto brokerage services.

In an interpretive letter released on Tuesday, the regulator said banks may act as principals in a crypto trade with one customer while simultaneously entering an offsetting trade with another, a structure that mirrors riskless principal activity in traditional markets. 

“Several applicants have discussed how conducting riskless principal crypto-asset transactions would benefit their proposed bank’s customers and business, including by offering additional services in a growing market,” notes the document.

According to the OCC, the move would allow customers “to transact crypto-assets through a regulated bank, as compared to non-regulated or less regulated options.”

Banks, United States, Donald Trump
The OCC’s interpretive letter affirms that riskless principal crypto transactions fall within the “business of banking.” Source: US OCC

The letter also reiterates that banks must confirm the legal permissibility of any crypto activity and ensure it aligns with their chartered powers. Institutions are expected to maintain procedures for monitoring operational, compliance and market risks.

“The main risk in riskless principal transactions is counterparty credit risk (in particular, settlement risk),” reads the letter, adding that “managing counterparty credit risk is integral to the business of banking, and banks are experienced in managing this risk.”

The agency’s guidance cites 12 U.S.C. § 24, which permits national banks to conduct riskless principal transactions as part of the “business of banking.” The letter also draws a distinction between crypto assets that qualify as securities, noting that riskless principal transactions involving securities were already clearly permissible under existing law.

The OCC’s interpretive letter — a nonbinding guidance that outlines the agency’s view of which activities national banks may conduct under existing law — was issued a day after the head of the OCC, Jonathan Gould, said crypto firms seeking a federal bank charter should be treated the same as traditional financial institutions.

According to Gould, the banking system has the “capacity to evolve,” and there is “no justification for considering digital assets differently” than traditional banks, which have offered custody services “electronically for decades.”

Related: Trump’s national security strategy is silent on crypto, blockchain

From ‘Choke Point 2.0’ to pro-crypto policy

Under the Biden administration, some industry groups and lawmakers accused US regulators of pursuing an “Operation Choke Point 2.0” approach that increased supervisory pressure on banks and firms interacting with crypto.

Since President Trump took office in January after pledging to support the sector, the federal government has moved in the opposite direction, adopting a more permissive posture toward digital asset activity.

Magazine: Quantum attacking Bitcoin would be a waste of time: Kevin O’Leary