A woman types on her laptop in Miami in a Monday, Dec. 12, 2016, photo illustration. An investigation into a scourge of NetWalker ransomware attacks has led to the arrest of a Canadian man, the U.S. Department of Justice said on Wednesday. According to an indictment, police in Florida charged Sebastien Vachon-Desjardins of Gatineau, Que., with illegally obtaining more than $27.6 million. THE CANADIAN PRESS/AP/Wilfredo Lee

A woman types on her laptop in Miami in a Monday, Dec. 12, 2016, photo illustration. An investigation into a scourge of NetWalker ransomware attacks has led to the arrest of a Canadian man, the U.S. Department of Justice said on Wednesday. According to an indictment, police in Florida charged Sebastien Vachon-Desjardins of Gatineau, Que., with illegally obtaining more than $27.6 million. THE CANADIAN PRESS/AP/Wilfredo Lee

Canadian man charged in U.S. with NetWalker ransomware attacks

The ransomware, like similar malware, often infiltrates computer networks via phishing emails

An investigation into a scourge of NetWalker ransomware attacks has led to the arrest of a Canadian man, the U.S. Department of Justice said on Wednesday.

According to an indictment, police in Florida charged Sebastien Vachon-Desjardins of Gatineau, Que., with illegally obtaining more than $27.6 million.

The accused is alleged to be part of a shadowy group of cyber criminals who have attacked several targets in Canada, including the College of Nurses of Ontario, a Canadian Tire store in B.C., and the Northwest Territories Power Corporation.

“Ransomware victims should know that coming forward to law enforcement as soon as possible after an attack can lead to significant results like those achieved in today’s multi-faceted operation,” Nicholas McQuaid, an acting assistant attorney general with the Justice Department, said in a statement.

U.S. authorities said they had seized about US$455,000 in cryptocurrency from ransom payments in three separate attacks. They also said authorities in Bulgaria had disabled a “dark web” resource used to communicate with NetWalker ransomware victims.

NetWalker operates as a so-called ransomware-as-a-service model, featuring “developers” and “affiliates,” who split the proceeds of any ransom paid. Experts say NetWalker attacks really took off last March as the criminals exploited fears of COVID-19 and people working remotely.

The ransomware, like similar malware, often infiltrates computer networks via phishing emails. Such messages masquerade as genuine, prompting users to provide log-in information or inadvertently download malware.

Earlier ransomware attacks focused on encrypting a target’s files — putting them and even backups out of reach. Increasingly, attackers also threaten to publish sensitive data stolen during the time spent inside an exploited network before encryption and detection.

Once a victim’s computer network is compromised and the data encrypted and downloaded, the NetWalker criminals demand money to return system access. If victims refuse, they might never regain their data or, more frequently now, the information is made public.

NetWalker ransomware has impacted numerous victims, including companies, municipalities, hospitals, law enforcement, emergency services, school districts, colleges and universities. Recent attacks have specifically targeted the health-care sector during the COVID-19 pandemic, taking advantage of the global crisis to extort victims.

Brett Callow, a Vancouver Island-based threat analyst with cybersecurity firm, Emsisoft, said the group had made millions. In one case last year, they extorted $1.4 million from a California university.

Police urged any victims to contact law enforcement right away.

“This case illustrates the FBI’s capabilities and global partnerships in tracking ransomware attackers, unmasking them, and holding them accountable,” Special Agent Michael McPherson, with the FBI’s field office in Tampa, Fla., said.

Colin Perkel, The Canadian Press

hackers

Get local stories you won't find anywhere else right to your inbox.
Sign up here

Just Posted

A health care worker prepares to test a Coastal GasLink field worker for COVID-19. (Coastal GasLink photo)
Coastal GasLink begins COVID screening of pipeline workers

Construction is once again ramping up following Northern Health approval of COVID management plan

A housing location for workers on the new Mills Memorial Hospital construction project has been approved by city council. (File photo)
Camp spot proposed for hospital construction workers

As many as 350 outside workers may be needed

Terrace city council are reaching out to the B.C. Office of the Ombudsperson regarding councillor Jessica McCallum-Miller’s resignation on Feb. 22, 2021. (Black Press Media File Photo)
City of Terrace seeking ombudsperson investigation into allegations of systemic racism

Councillor Jessica McCallum-Miller resigned Feb. 22, citing racism

A large provincial grant will make cycling and walking safer in Terrace. (File photo)
Large grant to make walking, cycling safer in Terrace

Pathway will connect old Skeena Bridge to the downtown

Pig races at the 145th annual Chilliwack Fair on Aug. 12, 2017. Monday, March 1, 2021 is Pig Day. (Jenna Hauck/ Chilliwack Progress file)
Unofficial holidays: Here’s what people are celebrating for the week of Feb. 28 to March 6

Pig Day, Canadian Bacon Day and Grammar Day are all coming up this week

Staff from the Marine Mammal Rescue Centre, passersby, RCMP and Nanaimo Fire Rescue carried a sick 300-kilogram steller sea lion up the steep bluff at Invermere Beach in north Nanaimo in an attempt to save the animal’s life Thursday. (Photo courtesy Marine Mammal Rescue Centre)
300-kilogram sea lion muscled up from B.C. beach in rescue attempt

Animal dies despite efforts of Nanaimo marine mammal rescue team, emergency personnel and bystanders

Kara Sorensen, diagnosed with lung cancer in July, says it’s important for people to view her as healthy and vibrant, rather than sick. (Photo courtesy of Karen Sorensen)
B.C. woman must seek treatment overseas for inoperable lung cancer

Fundraising page launched on Karen Sorensen’s behalf, with a goal of $250,000

Gina Adams as she works on her latest piece titled ‘Undying Love’. (Submitted photo)
‘Toothless’ the kitty inspires B.C. wood carver to break out the chainsaw

Inspired by plight of a toothless cat, Gina Adams offers proceeds from her artwork to help animals

B.C. Finance Minister Selina Robinson presents bill to delay B.C.’s budget as late as April 30, and allow further spending before that, B.C. legislature, Dec. 8, 2020. (Hansard TV)
How big is B.C.’s COVID-19 deficit? We’ll find out April 20

More borrowing expected as pandemic enters second year

The first of 11 Dash 8 Q400 aircraft's have arrived in Abbotsford. Conair Group Inc. will soon transform them into firefighting airtankers. (Submitted)
Abbotsford’s Conair begins airtanker transformation

Aerial firefighting company creating Q400AT airtanker in advance of local forest fire season

The Canada Revenue Agency says there were 32 tax fraud convictions across the country between April 2019 and March 2020. (Pixabay)
Vancouver man sentenced to 29 months, fined $645K for tax evasion, forgery

Michael Sholz reportedly forged documents to support ineligible tax credits linked to homeownership

Then-Liberal leader Andrew Wilkinson looks on as MLA Shirley Bond answers questions during a press conference at Legislature in Victoria. (Chad Hipolito / THE CANADIAN PRESS)
B.C. Liberal party to choose next leader in February 2022

Candidates have until Nov. 30 to declare whether they are running

After nearly 10 months of investigations, Mounties have made an arrest in the tripping of an elderly woman in Burnaby this past April. (RCMP handout)
VIDEO: Mounties charge suspect for tripping elderly woman near Metrotown in April

32-year-old Hayun Song is accused of causing bodily harm to an 84-year-old using her walker

Most Read