Canadian Extradited to U.S. Over Alleged University Cryptomining Scheme
Summary
A Canadian man was extradited to the U.S. to face charges over an alleged scheme with another Canadian to breach at least four university networks, steal credentials and use compromised computers for cryptocurrency mining.
Key points
- Ryan James Roach was extradited from Canada to the U.S. on Oct. 28 and arraigned in federal court in New York.
- Prosecutors allege Roach and Mathiew James Stubbings compromised at least four U.S. university networks between mid-2016 and late 2019.
- The indictment alleges the men targeted supercomputers with exploitable vulnerabilities, stole credentials and data, and deployed malware and rootkits.
- Prosecutors say the alleged scheme used virtual private servers rented under false identities to conceal traffic and deliver cryptocurrency-mining software.
- The indictment says at least one supercomputer’s processing capacity became unavailable to its legitimate owner while it mined cryptocurrency for the defendants.
- Prosecutors are still seeking Stubbings’ extradition. The men have been charged; the allegations have not been established at trial.
Article Details
- Event Type
- Criminal case involving the extradition of Ryan James Roach to the United States for alleged university network intrusions and cryptocurrency mining; prosecutors said they were still seeking Mathiew James Stubbings’ extradition.
- Impact
- Prosecutors allege the men stole credentials and data, deployed malware and rootkits, and used compromised computers to mine cryptocurrency. They said at least one supercomputer lost much of its processing speed and power to its legitimate owner. The defendants face up to 10 years in prison and a $250,000 fine if convicted.
Threat Actors
Mathiew James StubbingsProsecutors allege he participated in intrusions into U.S. university networks, credential and data theft, malware deployment, and cryptocurrency mining.Ryan James RoachProsecutors allege he participated in intrusions into U.S. university networks, credential and data theft, malware deployment, and cryptocurrency mining.