Canadian man extradited to US over alleged university network cryptomining spree
BREACHredteam/daily · 1 source
- Severity
- Medium
- Sources
- 1
What happened
Ryan James Roach was extradited to the US on 28 October and arraigned in the Western District of New York; Mathiew James Stubbings remains subject to extradition. The indictment, unsealed after an April 2022 grand jury, alleges credential theft, rootkit deployment and cryptomining malware delivered via European and US virtual private servers against universities in New York, Tennessee, North Carolina and Massachusetts. No CVE identifiers or patch guidance were given. Defenders should audit academic and HPC environments for unauthorised miners, rootkits and reused credentials.
For security analysts · Written by AI from 1 source · Wrong?
What to do
- Check high-performance computing and university systems for unexplained cryptomining processes and rootkits.
- Reset credentials on systems that may have been compromised and enforce unique passwords.
Written by AI from the sources, checked against them
Full story timeline · 1 update
Who reported · 1 outlet
CyberScoop