Botnet Operator Charged with Major Cyber Crimes in the U.S.

Alexander Lefterov, also known under various aliases such as “Alipako” and “Uptime,” has been indicted by a federal grand jury in Pittsburgh, Pennsylvania, on charges related to operating a botnet, including computer fraud, aggravated identity theft, and wire fraud conspiracy.

Announced on April 16, 2024, by the U.S. Attorney's Office for the Western District of Pennsylvania, this indictment underscores the global challenge of cybercrime and the efforts to combat it.

Indictment details

Alexander Lefterov, a 37-year-old Moldovan national from Chisinau, Moldova, was involved in the orchestration and operation of a botnet that infiltrated thousands of computers across the United States, including in the Western District of Pennsylvania.

The indictment, unsealed on April 16, 2024, reveals that between March 2021 and November 2021, Lefterov and his accomplices utilized the botnet to hijack victim credentials—such as usernames and passwords—gaining unauthorized access to financial accounts and retail networks.

The co-conspirators, identified as skilled “coders,” maintained and upgraded the botnet's capabilities over time, enabling the group not only to steal directly from victims but also to rent out the botnet to other cybercriminals. This criminal network provided access to malware distribution tools, including ransomware, amplifying their ability to exploit the compromised systems for financial gains.

Each charge levied against Lefterov carries a severe potential penalty. The conspiracy to commit computer fraud and wire fraud, along with unauthorized access for private financial gain, each could result in up to five years of imprisonment. Furthermore, the charge of intentional damage to a protected computer could lead to a decade in prison, while aggravated identity theft mandates a minimum of two years, which must be served consecutively to any other prison term.

The indictment is a result of diligent investigation by the Federal Bureau of Investigation and the United States Secret Service, with contributions from the Justice Department’s Office of International Affairs and law enforcement agencies in Lithuania and Moldova. U.S. Attorney Eric G. Olshan highlighted the case as a demonstration of the commitment to combating cybercrime, regardless of the geographical barriers.

The legal proceedings for Alexander Lefterov are forthcoming, and he is presumed innocent until proven guilty. However, this indictment serves as a critical step in addressing the complex landscape of global cybercrime.