Extradited Russian Hacker Faces Charges Over Excel Malware Campaign That Infected Thousands
Overview
Searzhudin Tamirlanovich Aktulaev, a 40-year-old Russian hacker, has been extradited to the U.S. after being arrested in Cyprus. He faces charges for allegedly using around 255 fake accounts on a freelance platform to distribute malware-laden Excel attachments, which resulted in the infection of about 80,000 users between 2016 and 2017. The malware campaign highlights the ongoing risks associated with malicious attachments in seemingly legitimate communications. The U.S. Department of Justice is pursuing this case to hold Aktulaev accountable for his actions and to deter similar cybercrimes. This incident serves as a reminder for users to remain cautious about opening attachments from unfamiliar sources.
Key Takeaways
- Affected Systems: Excel attachments, freelance platform users
- Action Required: Users should be cautious about opening email attachments from unknown senders and ensure their antivirus software is up to date.
- Timeline: Ongoing since 2016
Original Article Summary
The U.S. Department of Justice (DoJ) has charged a Russian national, extradited from Cyprus on August 28, with using roughly 255 fake accounts on a freelance platform to send malware-laced Excel attachments to about 80,000 of its users in 2016 and 2017. Searzhudin Tamirlanovich Aktulaev, 40, was arrested in Cyprus in May 2025, the U.S. Attorney's Office for the Northern District of California
Impact
Excel attachments, freelance platform users
Exploitation Status
No active exploitation has been reported at this time. However, organizations should still apply patches promptly as proof-of-concept code may exist.
Timeline
Ongoing since 2016
Remediation
Users should be cautious about opening email attachments from unknown senders and ensure their antivirus software is up to date.
Additional Information
This threat intelligence is aggregated from trusted cybersecurity sources. For the most up-to-date information, technical details, and official vendor guidance, please refer to the original article linked below.
Related Topics: This incident relates to Malware.