Transcripts For CSPAN2 Justice Department Briefing On Russia

We are here to identify and announce charges against a Russian National who the department of justice alleges is responsible for two of the worst computer hacking and Bank Fraud Schemes of the past decade. The charges were announcing today are nearly allegations in each of the dependence is presumed innocent until Proven Guilty beyond a reasonable doubt in a court of law. Maxine iacobucci of moscow russia, has been indicted in Pittsburgh Pennsylvania for his alleged role as the leader of a cyber criminal gang responsible for the distribution of a multifunction malware package known as bugatti. The gods was designed to automate the theft of confidential personal information and Financial Information such as Online Banking credentials from infected computers. Later versions of the malware also known as dry decks were designed with the added function of assisting in the installation of rand somewhere. Over the past decade the buka at malware facilitated the theft of millions of dollars from victims, some of which occurred as recently as may of this year. A second coconspirators ego was also indicted in pittsburgh in connection with boo got scheme. Yucca veg is also been charged in a criminal complaint in lincoln nebraska for his participation in this game to disseminate zeus a similar form of malware that was like wise used to empty out financial accounts of its victims. According to the complaint the deployment of zeus resulted in a total attempted theft of around 220 million with actual losses of an estimated 70 million from victims Bank Accounts. Yucca veg is a true 21st century criminal who with the strength of the key and click of a mouse had cyber crimes across the globe. Hes earned his place on the fbis worlds most wanted cyber criminals. Today our colleagues to the state department will have an announcement in a few minutes that will further our collective efforts to bring iacovelli to justice. A little bit of detail about the mallard employed by yucca veg in his coconspirators. Both forms of the malware intercepts passwords and other private information that can be used to conduct wire transfers. The malware then initiates a or read rex wire transfers from victim Bank Accounts to foreign Bank Accounts controlled by the criminals. Because many of the victims of both boo gods and zeus are small and midsize businesses, their accounts typically do not have the same protections afforded to consumer accounts. So some of the losses involved over particularly devastating. Iacovelli and his coconspirators did not discriminate either on their choice of targets. For example the nebraska complaint alleges directly involved in tens of thousands of dollars from religious order of franciscan sisters. Yucca veg and members of his criminal network devised and implemented the kinds of criminals game so audacious and sophisticated that it would be difficult to imagine if they were not real. Sitting quietly at computer terminals far far away, these cyber criminals allegedly stole tens of millions of dollars from unwitting members of our business, nonprofit, governmental, and religious communities. Each and every one of these computer intrusions was effectively a cyber enabled bank robbery. We take crimes like this extremely seriously, and will do everything in our power to hold these criminals accountable for their crimes. The justice department, federal prosecutors, fbi analysts in authorities and a number of different jurisdictions all Work Together to unmask iacovelli and his coconspirators. The assistance provided by numerous private sector partners was likewise invaluable, but i also want to especially thank our foreign Law Enforcement partners who are on stage here today from the United Kingdom. A National Crime agency and the metropolitan Police Service in the uk detect had their own service in the harms that zeus and boo got viruses head to the uk and uk victims. These folks also provided invaluable assistance to our investigations here in the United States as well. The uk also extradited to have iacobuccis coconspirators and this is scheme to the United States to face justice. Iacovelli allegedly has been engaged in cyber crimes on an almost unimaginable scale for over a decade. Our goal is to identify the perpetrators of these crimes in rapid fashion. The reality of Law Enforcement work is that a quick resolution to these cases cannot always happen. But make no mistake, we will doggedly pursued cyber criminals until we can bring them to justice. Todays announcement should make clear to those engaged in cyber crime, that we will identify you, we will unmask you, and will prosecute you, no matter how much effort it requires or how long it might take. You will never have a safe haven from the efforts of the United States Law Enforcement and our International Partners to bring you to justice. And to that end i want to thank the United States Attorneys Office from the western from the district of nebraska, the fbi, state department, and the uks National Crime agency in metropolitan Police Service. All which are represented behind a by individuals and leaders of those particular institutions. And with that id like to turn over to scott brady of the district of pennsylvania to make some remarks. Thank you brian good morning everyone. Today we have announce an indictment now the Western District of pennsylvania against two of the most prolific cyber criminals in the world. Mocks him iacovelli and igor tour have spent the last decade infecting Computers Worldwide with the boo got dry decks malware. Companies and citizens of the Western District of pennsylvania have been targeted and defrauded by these cyber criminals. Yucca veg also known as aqua, is the leader of the boo got cried ex dry decks malware and botnets conspiracy. He oversees and manages the development, maintenance, and distribution, and infection of malware. Ego also noticed thank, or an into two is also a close associate of iacovelli and serves as the system administrator, as oversight over botnets, and manages internal systems used by the criminal group. Together these two criminals have victimized our district and the world at large. Some of the victims in western pennsylvania include a school district, two banking institutions, and number of businesses including a petroleum business, technology company, a manufacturing company, and a Building Material supply company. The dry decks malware conspiracy was a constantly evolving and adapting criminal enterprise that had a level of sophistication and scope of threat that we rarely see. And this conspiracy was marked by constant innovation. Even as we disrupted jabber zeus malware conspiracy, the game over zeus, and we prosecuted one of dried axis system administrators in 2015 named ginkgo. We sing called a sub botnets for this conspiracy in 2016 including, and we also indicted a belarusian money mule network in 2016. In spite of all these efforts by Law Enforcement, they continued to adapt and innovate. They went from centralized command and control systems to peertopeer botnets. They used more sophisticated web injects, they increase their use of encryption and enhance security methods. And they change from the use of International Wire transfers to ransom ware and crypto currency to private accounts. And this is why this is been the most widespread and destructive malware and banking trojans in the world over the last decade. I do want to say a quick word about the victims. You note the department of justice we are charged with enforcing the laws the United States and seeking justice. But our calling is to protect our fellow citizens and our friends and our neighbors. And the First Western pennsylvania evicting when sharon high school, sharon pennsylvania is a small steel town and i actually have family members who have attended and graduated from sharon. And we know that for every dollar stolen from the school district, thats one less dollar that they have for the High School Football team, are the Girls Basketball team. One less dollar for teacher salaries or for special education. For every dollar stolen from an individual, thats one less dollar they have for their retirement. When the seller they have for their childrens education or for a family vacation. And for every dollar stolen from a company, thats one less dollar to innovate, to create new products, to enter new markets, or to hire those same friends and neighbors. And this is why we go to the ends of the earth to investigate and prosecute cyber criminals. These of the cyber criminals who victimize our citizens i will pursue them, we will prosecute them whether these criminals are in Pittsburgh Pennsylvania in mints or in moscow. I like to echo brians thanks to our International Partners especially nca, but id especially like to recognize for the western pennsylvania indictment the work, outstanding work of assistant u. S. Attorney and the work of the best cyber group in the fbi in the field office of pittsburgh. And now were going to hear from joe kelly who is the u. S. Attorney from nebraska. Thank you. In the district of nebraska, the complaint against the iacovelli and his coconspirators refers to three different nebraska Bank Accounts belonging to Small Businesses and to emphasize thats just the net brassica aspect for the victims. The conspiracy is much broader than that, and into other states. But as to those three nebraska intended victims, to were averted. In those cases there were no losses associated with the two businesses, but there was actual loss of a hundred and 59,000 with regard to the third period thats just in the state of nebraska. But as been said, the actual losses to all victims in the various states is estimated at nearly 70 million. The methodology was similar each time. In fact the business computer, obtain Bank Account Numbers and security codes, and initiate Electronic Fund transfers to money mules overseas. We appreciate the hard work and the intelligence of roach to this investigation by all the justice department, u. S. Law enforcement agencies, and their partners around the world. I want to recognize the Important Role played by the omaha fbi office in this investigation from its inception. This is a great example of the ongoing teamwork Law Enforcement in the International Community clearly demonstrates the resolve to hold these criminals accountable. When someone hears about a case like this, very often the First Response is well theres nothing you can really do about these. Today, were here to demonstrate that we can. And will. Good morning, as you know the fbi is charged with defending United States citizens and businesses against a wide range of cyber crimes. We face Cyber Threats from hackers, hikers for hire, organize sin syndicates and overseas adversaries like the individuals that are indicted today. Todays announcement we are launching a wide ranging disruption operation targeting his coconspirators that he leaves. Over ten year period to cuba its also known as aqua and his coconspirators have operated, and improved multiple malware variants to go after us many victims as possible. They enrich themselves through theft, fraud, and deceit. They spread their malware primarily through phishing emails, spam campaigns. They because losses and exes of tens of millions of dollars with attempted theft raging in the hundreds of millions of dollars. These malware variants affected thousands of u. S. American victims. They include a Dairy Company in ohio to a luggage store in new mexico. And even an order of religious sisters as the assistant attorney noted previously. I want to emphasize a few key points that cases like this demonstrate. First, they show the evolution of cyber criminals and their capabilities. Over the past several years and how persistent these cyber criminals are. In this case we have individuals and groups using different tools, tactics and techniques over time and they adapted them to effectively evolve their scams. Second, these cases show that cyber criminals have banded together. They are leveraging each others strengths and forming organized criminal syndicates. To more effectively victimize our public. Which brings me to the third. To successfully combat them, we as Law Enforcement partners, must do the same. We must come together, partner closely, and leverage each others strengths. We must integrate and innovate to combat these cyber criminals globally. And thats just well done here. The fbi would also like to thank its partners from certainly the department of justice, the department of state, treasury department, and the uks National Crime agency. Strong national and International Partnerships are important to cyber investigations. As we have often said publicly, cyber criminals disregard borders be they states or countries. This often requires an International Response like the one youre seeing here today. In the case of you convicts, the fbi works handinhand with the National Crime agency and sharing investigative information and intelligence information for nearly a decade. Why nearly a decade . Because these cases are incredibly complex and the networks that purge perpetrate them are very complex and sometimes global. These are sophisticated cyber criminals operating complex variance sale investigations of this type do take time. Todays announcement demonstrates are resolved to bring cyber criminals and their activities to lights. Because these criminals are in russia, some ask why pursue them . You may never get your hands on them. Its difficult, no doubt. But its not impossible as we have shown time and time again. Although the long arm of the law, and i do like that term, does stretch throughout the world. And having your name your face, or description on a wanted poster makes moving around freely much more difficult. So we are going to keep at it because collectively the fbi on our partners, we have a very long memory. And we will never give up. We have a track record of success when it comes to catching cyber criminals throughout the globe. Simply naming them and then indictment accomplishes a great deal. We know that through many forms and fashions. Through many methods. State sponsors and other clients cry hackers for their anonymity, deniability, and their stealth. Calling these actors out publicly through these indictment strips away that anonymity. Other parts of our government can use the information developed through our investigation to impose additional costs. Like financial sanctions or revoking the ability to travel. And finally, the charging document is a key step in achieving justice for the victims. We could not have gotten this far in our case without the cooperation of the victims. And i think sometimes we think about financial impact. Thats significant, but we also have to member they are people behind that financial impact. We understand that companies and institutions are under immense pressure during and certainly after cyber attacks. And they may be reluctant to report these breaches. But we urge all victims to contact their local field office, their local fbi field offices soonest possible once they realize theyve been hacked. And we encourage our victims to file a detailed report with the Fbis Internet Crime Complaint Center at www. Dot i see three. Gov. The fbi may be able to provide Additional Information or help during, and certainly after an attack. You two can help us fight these attacks. We all need to do our part to make sure that our systems are as secure as possible. There is no guarantee against exploitation for anyone. But we cannot stress enough the importance of cyber hygiene. And preventative measures that we can take. Time and time again, we find that not following the basics of cyber hygiene makes us more vulnerable. And allows us to be more easily exploited. For guidance and to help improve your systems. Please visit www. I see three. Gov. We have to do whatever we can together to lay hands on these criminals to deter others from joining them. I do want to not only thank our partners, but i would like to thank the efforts of our agents enter analysts from the fbi. Certainly our partners as well have worked very hard. But my own people, we appreciate your diligence, these cases are very difficult. There tedious and technical and they required tenacity and resolved. Thank you. The efforts to bring yucca veg to justice is a high prairie for the nine states. The state department is pleased to be part of this joint effort. The fact that all her agencies and the United Kingdom are represented here today underscores how closely we Work Together. We