Russian national Searzhudin Tamirlanovich Aktulaev faces federal charges for allegedly orchestrating a malware scheme that compromised approximately 80,000 freelance accounts using malicious Excel attachments and remote access trojans.

Key Points

• Aktulaev is charged with conspiracy, computer damage, and aggravated identity theft following his extradition from Cyprus to the United States.
• The operation utilized roughly 255 fake freelance profiles to distribute emails containing macros that installed TVRAT and DarkVNC malware.
• Between June 2016 and November 2017, the scheme targeted users of a California-based freelance employment platform to gain remote control of infected machines.
• Investigators recovered a document containing stolen e-commerce credentials and personal data belonging to hundreds of victims.
• The defendant is scheduled for a status conference on October 5 before US District Judge Donato.

Why it Matters

This case highlights the persistent threat of social engineering attacks targeting professional freelance platforms to facilitate large-scale data theft and unauthorized remote access. It underscores the critical importance of platform security and user vigilance regarding macro-enabled documents in unsolicited communications.