A woman types on her laptop in Miami in a Monday, Dec. 12, 2016, photo illustration. An investigation into a scourge of NetWalker ransomware attacks has led to the arrest of a Canadian man, the U.S. Department of Justice said on Wednesday. According to an indictment, police in Florida charged Sebastien Vachon-Desjardins of Gatineau, Que., with illegally obtaining more than $27.6 million. THE CANADIAN PRESS/AP/Wilfredo Lee

A woman types on her laptop in Miami in a Monday, Dec. 12, 2016, photo illustration. An investigation into a scourge of NetWalker ransomware attacks has led to the arrest of a Canadian man, the U.S. Department of Justice said on Wednesday. According to an indictment, police in Florida charged Sebastien Vachon-Desjardins of Gatineau, Que., with illegally obtaining more than $27.6 million. THE CANADIAN PRESS/AP/Wilfredo Lee

Canadian man charged in U.S. with NetWalker ransomware attacks

The ransomware, like similar malware, often infiltrates computer networks via phishing emails

An investigation into a scourge of NetWalker ransomware attacks has led to the arrest of a Canadian man, the U.S. Department of Justice said on Wednesday.

According to an indictment, police in Florida charged Sebastien Vachon-Desjardins of Gatineau, Que., with illegally obtaining more than $27.6 million.

The accused is alleged to be part of a shadowy group of cyber criminals who have attacked several targets in Canada, including the College of Nurses of Ontario, a Canadian Tire store in B.C., and the Northwest Territories Power Corporation.

“Ransomware victims should know that coming forward to law enforcement as soon as possible after an attack can lead to significant results like those achieved in today’s multi-faceted operation,” Nicholas McQuaid, an acting assistant attorney general with the Justice Department, said in a statement.

U.S. authorities said they had seized about US$455,000 in cryptocurrency from ransom payments in three separate attacks. They also said authorities in Bulgaria had disabled a “dark web” resource used to communicate with NetWalker ransomware victims.

NetWalker operates as a so-called ransomware-as-a-service model, featuring “developers” and “affiliates,” who split the proceeds of any ransom paid. Experts say NetWalker attacks really took off last March as the criminals exploited fears of COVID-19 and people working remotely.

The ransomware, like similar malware, often infiltrates computer networks via phishing emails. Such messages masquerade as genuine, prompting users to provide log-in information or inadvertently download malware.

Earlier ransomware attacks focused on encrypting a target’s files — putting them and even backups out of reach. Increasingly, attackers also threaten to publish sensitive data stolen during the time spent inside an exploited network before encryption and detection.

Once a victim’s computer network is compromised and the data encrypted and downloaded, the NetWalker criminals demand money to return system access. If victims refuse, they might never regain their data or, more frequently now, the information is made public.

NetWalker ransomware has impacted numerous victims, including companies, municipalities, hospitals, law enforcement, emergency services, school districts, colleges and universities. Recent attacks have specifically targeted the health-care sector during the COVID-19 pandemic, taking advantage of the global crisis to extort victims.

Brett Callow, a Vancouver Island-based threat analyst with cybersecurity firm, Emsisoft, said the group had made millions. In one case last year, they extorted $1.4 million from a California university.

Police urged any victims to contact law enforcement right away.

“This case illustrates the FBI’s capabilities and global partnerships in tracking ransomware attackers, unmasking them, and holding them accountable,” Special Agent Michael McPherson, with the FBI’s field office in Tampa, Fla., said.

Colin Perkel, The Canadian Press

hackers

Just Posted

Brenda and Steve Smith with a photo of Derek Descoteau. It’s been five years since Derek was murdered in Chemainus. (Photo by Don Bodger)
Friends provide continuing comfort for family in wake of unresolved Chemainus murder

Case remains before the courts five years after Derek Descoteau’s abrupt stabbing death in Chemainus

RCMP. (Phil McLachlan - Black Press Media)
Shawnigan RCMP wrap up investigation into ‘suspicious occurrence’

Police and complainant satisfied with explanation

More “strings of lights” were seen on May 15, 2021, in night sky over Vancouver Island. (File photo)
COVID-19 virus (file photo).
Possible COVID-19 exposure reported at Mill Bay Thrifty Foods

Employee tested positive, last worked on May 8

The former St. Joseph’s School converted to the St. Joseph’s Art Studios in 2019. (File photo by Don Bodger)
Former Chemainus St. Joseph’s School site sold to addictions recovery group

Diocese stresses the importance of a community outreach option in its decision

An avalanche near Highway 1 in Glacier National Park. Avalanche Canada will benefit from a $10 million grant from the B.C. government. (Photo by Parks Canada)
Avalanche Canada receives $10-million grant from B.C. government

Long sought-after funds to bolster organization’s important work

Reinhard “Bud” Loewen of Abbotsford has now been charged with 21 counts of sexual assault related to his massage business. (Facebook photo)
Former Abbotsford masseur now faces 21 counts of sexual assault

Bud Loewen of Bud’s Massage Therapy initally faced three charges

Over the years, police have worked with sketch artists to draw what the boys could have looked like at the times of their deaths. (Vancouver Police Department)
DNA breakthrough expected in cold case involving murdered Vancouver boys, 7 and 8

Forensic analysts are working to identify relatives of the children, whose bodies were found in Stanley Park in 1953

Livestock competitions have been part of the Pacific National Exhibiton for more than a century. (Maple Ridge News files)
B.C. provides $50 million to keep major tourist attractions going

Tour bus companies also eligible for latest COVID-19 aid

A prowling coyote proved no match for a stray black cat who chased it out of a Port Moody parking lot Friday, May 14. (Twitter/Screen grab)
VIDEO: Little but fierce: Cat spotted chasing off coyote by Port Moody police

The black cat is seen jumping out from under a parked car and running the wild animal out of a vacant lot

The new wing at the Victoria International Airport opened up on Thursday (File contributed/YYJ)
Pandemic takes ‘hundreds of millions’ out of Victoria Airport, Vancouver Island economy

Airport authority head says passenger volumes down as much as 98 per cent

The top photo is of a real carbine rifle, while the bottom photo is the airsoft rifle seized from a Kelowna man on May 15. (Contributed)
RCMP issue warning: ‘Imitation firearms need to be dealt with responsibly’

A man brandishing his airsoft rifle in public had his weapon seized by Mounties on Saturday

Reigning women’s World Champion Kaetlyn Osmond, who also took bronze at the 2018 Pyeongchang Winter Olympics, will debut two brand new programs for the 2021 Stars On Ice tour, in Victoria May 15. (File photo)
Kurt Browning, Elvis Stojko hit the ice when Stars On Ice returns to Vancouver Island

The star-studded lineup is makes a return after pandemic hiatus

Abbotsford Regional Hospital. (Black Press Media files)
Canada marks 25,000 COVID-19 deaths since the pandemic began

6 in every 10,000 Canadians died of COVID-19 since March 9, 2020

Most Read