Two Canadian nationals are facing legal action in New York for allegedly executing a prolonged cyberattack campaign that exploited computational resources from American universities for unauthorized cryptocurrency mining.
Details of the Indictment
Ryan James Roach, aged 35, from Saskatchewan, and Mathiew James Stubbings, aged 41, from Ontario, have been indicted by a federal grand jury. The charges include conspiracy to access protected computers, acquiring data from them, and deliberately causing damage. These actions form part of a broader strategy to utilize university systems for cryptomining.
Roach has been extradited to the United States as of October 28, while Stubbings is still undergoing extradition proceedings in Canadian courts.
The Cyber Intrusion Campaign
The alleged cyber incursions, detailed in the indictment, took place from June 2016 to December 2019. Universities in New York, Massachusetts, North Carolina, and Tennessee were among the targets. The perpetrators are accused of creating a network of virtual private servers across multiple countries, using fake identities to manage their operations.
These servers were reportedly used to distribute malware and cryptomining software while storing stolen login details. The campaign specifically targeted institutions with supercomputing capabilities, employing compromised systems to mask their activities.
Implications and Legal Proceedings
Court documents from Canada indicate that the compromised university infrastructure was used to mine the cryptocurrency Electroneum. Prosecutors have noted that once inside a network, Roach and Stubbings employed advanced techniques to further penetrate and control the systems.
If found guilty, each count could result in a maximum prison sentence of 10 years and a fine of $250,000. This case highlights the significant risks and potential penalties associated with cybercrimes targeting educational institutions.
The ongoing legal proceedings and potential outcomes will be closely watched, providing insights into how international cybercrime is addressed across borders.
