A woman types on her laptop in Miami in a Monday, Dec. 12, 2016, photo illustration. An investigation into a scourge of NetWalker ransomware attacks has led to the arrest of a Canadian man, the U.S. Department of Justice said on Wednesday. According to an indictment, police in Florida charged Sebastien Vachon-Desjardins of Gatineau, Que., with illegally obtaining more than $27.6 million. THE CANADIAN PRESS/AP/Wilfredo Lee

A woman types on her laptop in Miami in a Monday, Dec. 12, 2016, photo illustration. An investigation into a scourge of NetWalker ransomware attacks has led to the arrest of a Canadian man, the U.S. Department of Justice said on Wednesday. According to an indictment, police in Florida charged Sebastien Vachon-Desjardins of Gatineau, Que., with illegally obtaining more than $27.6 million. THE CANADIAN PRESS/AP/Wilfredo Lee

Canadian man charged in U.S. with NetWalker ransomware attacks

The ransomware, like similar malware, often infiltrates computer networks via phishing emails

An investigation into a scourge of NetWalker ransomware attacks has led to the arrest of a Canadian man, the U.S. Department of Justice said on Wednesday.

According to an indictment, police in Florida charged Sebastien Vachon-Desjardins of Gatineau, Que., with illegally obtaining more than $27.6 million.

The accused is alleged to be part of a shadowy group of cyber criminals who have attacked several targets in Canada, including the College of Nurses of Ontario, a Canadian Tire store in B.C., and the Northwest Territories Power Corporation.

“Ransomware victims should know that coming forward to law enforcement as soon as possible after an attack can lead to significant results like those achieved in today’s multi-faceted operation,” Nicholas McQuaid, an acting assistant attorney general with the Justice Department, said in a statement.

U.S. authorities said they had seized about US$455,000 in cryptocurrency from ransom payments in three separate attacks. They also said authorities in Bulgaria had disabled a “dark web” resource used to communicate with NetWalker ransomware victims.

NetWalker operates as a so-called ransomware-as-a-service model, featuring “developers” and “affiliates,” who split the proceeds of any ransom paid. Experts say NetWalker attacks really took off last March as the criminals exploited fears of COVID-19 and people working remotely.

The ransomware, like similar malware, often infiltrates computer networks via phishing emails. Such messages masquerade as genuine, prompting users to provide log-in information or inadvertently download malware.

Earlier ransomware attacks focused on encrypting a target’s files — putting them and even backups out of reach. Increasingly, attackers also threaten to publish sensitive data stolen during the time spent inside an exploited network before encryption and detection.

Once a victim’s computer network is compromised and the data encrypted and downloaded, the NetWalker criminals demand money to return system access. If victims refuse, they might never regain their data or, more frequently now, the information is made public.

NetWalker ransomware has impacted numerous victims, including companies, municipalities, hospitals, law enforcement, emergency services, school districts, colleges and universities. Recent attacks have specifically targeted the health-care sector during the COVID-19 pandemic, taking advantage of the global crisis to extort victims.

Brett Callow, a Vancouver Island-based threat analyst with cybersecurity firm, Emsisoft, said the group had made millions. In one case last year, they extorted $1.4 million from a California university.

Police urged any victims to contact law enforcement right away.

“This case illustrates the FBI’s capabilities and global partnerships in tracking ransomware attackers, unmasking them, and holding them accountable,” Special Agent Michael McPherson, with the FBI’s field office in Tampa, Fla., said.

Colin Perkel, The Canadian Press

hackers

Get local stories you won't find anywhere else right to your inbox.
Sign up here

Just Posted

Former Stettler area resident Art Kempf celebrated his 100th birthday on Feb 22nd. In the morning, 100 cows were placed by family on the lawn of Royal Oaks in Lacombe, and during the afternoon, a surprise party was arranged by staff and residents of Royal Oaks as well. Later that evening, a surprise virtual birthday party was held with friends and family to celebrate and honor Art.
photo submitted
Former Stettler area resident Art Kempf celebrated his 100th birthday Feb 22nd

Kempf now lives at the Royal Oak Village in Lacombe

Alberta has 1,910 active cases of COVID-19 as of Wednesday. Red Deer is reporting five active cases, with 108 recovered. (File photo)
Red Deer reports 25th COVID-19 death

415 new cases identified provincially Saturday

Board and school councils are celebrating staff during the month of February.
photo submitted
Board and school councils celebrate staff during the month of February

‘Our school staff and support staff make the success of our students happen.’

Alberta Health reported two new COVID-19 deaths in Red Deer Friday. (Image courtesy CDC)
Two more deaths linked to Olymel outbreak in Red Deer

Province reported 356 additional COVID-19 cases Friday

Alberta Premier Jason Kenney speaks during a news conference in Edmonton on Feb. 24, 2020. It’s budget day in the province, and Kenney’s United Conservative government is promising more help in the fight against COVID, but more red ink on the bottom line. THE CANADIAN PRESS/Jason Franson
Alberta’s budget promises more help for COVID-19 with a hard deficit

Annual spending on debt interest is closing in on $3 billion

Bookings for COVID-19 vaccines for people age 75 or older start Wednesday. (File photo by THE CANADIAN PRESS)
Updated: Delays for seniors booking for vaccine appointments

By 9:20 a.m. Wednesday, 4,500 seniors had booked their appointments

A helicopter flies past a mountain near McBride, B.C., on Saturday January 30, 2016. THE CANADIAN PRESS/Darryl Dyck
Avalanche warning for backcountry users in North and South Rockies

Avalanche Canada is urging backcountry users to always check their regional avalanche forecasts

Supporters pray outside court in Stony Plain, Alta., on Wednesday, Feb. 24, 2021, as a trial date was set for Pastor James Coates of GraceLife Church. He is charged with holding Sunday services in violation of Alberta’s COVID-19 rules and with breaking conditions of his bail release. THE CANADIAN PRESS/Jason Franson
Trial date for jailed Alberta pastor charged with breaking COVID-19 health orders

The court says it will reconvene with lawyers on March 5 for a case management plan by teleconference

A pharmacist prepares a COVID-19 vaccine at Village Green Retirement Campus in Federal Way on Jan. 26. (Olivia Sullivan/Sound Publishing)
Canada approves use of AstraZeneca’s COVID-19 vaccine

The country joins more than a dozen others in giving the shot the green light

Emily Keeping of Wetaskiwin, Alta., was last seen at 4:20 p.m. on Feb. 25, 2021 at the FasGas on 49 St and 50 Ave in Wetaskiwin. Supplied/ Wetaskiwin RCMP.
UPDATE: Wetaskiwin RCMP seek assistance in locating missing 11-year-old

Emily Keeping was last seen on Feb. 25, 2021 at the FasGas on 49 St and 50 Ave in Wetaskiwin.

Sylvan Lake's Winter Village lured many visitors to the town this winter. The town has launched a new contest to attract a new business.
(Black Press file photo)
Sylvan Lake offering rent-free storefront space to lure new businesses

Winning business proposal will get a storefront space rent-free for a year

Alberta premier Jason Kenney, right and Doug Schweitzer, Minister of Justice and Solicitor General, provide details about Bill 13, the Alberta Senate Election Act., in Edmonton Alta, on Wednesday June 26, 2019. THE CANADIAN PRESS/Jason Franson
Minister Doug Schweitzer talks on Enhanced COVID-19 Business Benefit

Provincial government rolling out new benefit this April to better help small businesses.

NDP leader Jagmeet Singh holds a press conference on Parliament Hill in Ottawa on Wednesday, Feb. 24, 2021. THE CANADIAN PRESS/Sean Kilpatrick
NDP will not trigger election as long as pandemic continues: Singh

‘“We will vote to keep the government going’

Mike Ammeter (Photo by Rebecca Hadfield)
Sylvan Lake man elected chair of Canadian Canola Growers Association

Mike Ammeter is a local farmer located near the Town of Sylvan Lake

Most Read