Russian pleads guilty for involvement in global malware conspiracy
Maxim Senakh, 41, of Velikii Novgorod, Russia, pleaded guilty today to conspiracy to violate the Computer Fraud and Abuse Act and to commit wire fraud before U.S. District Judge Patrick J. Schlitz of the District of Minnesota. Sentencing is set for Aug. 3, 2017. Senakh was indicted on Jan. 13, 2015, and was subsequently arrested by Finnish authorities, who extradited him to the United States.
According to admissions made in connection with the plea agreement, the malware, which is known as Ebury, harvested log-on credentials from infected computer servers, allowing Senakh and his co-conspirators to create and operate a botnet comprising tens of thousands of infected servers throughout the world, including thousands in the United States.
Senakh and his co-conspirators used the Ebury botnet to generate and redirect internet traffic in furtherance of various click-fraud and spam e-mail schemes, which fraudulently generated millions of dollars in revenue.
As part of the plea, Senakh admitted that he supported the criminal enterprise by creating accounts with domain registrars which helped build the Ebury botnet infrastructure and personally profited from traffic generated by the Ebury botnet.