“Evil Corps,” a Russian hacker collective with FSB ties, uses malware to target personal information of customers of over 300 banks in 40 countries, and also provides material assistance to the FSB in hacking attacks against overseas targets.
Maxim Yakubets, a Russian citizen with familial ties to the FSB, has since 2009 led a hacker group calling itself “Evil Corps” that has used a malware known as “Dridex” to attack the personal information of customers of over 300 banks in 40 countries. Yakubets’ crime spree began in 2009 when he and an accomplice stole $415,000 from the treasury of Bullitt County, KY. He has outstanding indictments against him in Nebraska and Pennsylvania, and the U.S. Treasury Department has announced that his group has worked to steal confidential documents on behalf of the FSB. Investigation by Meduza indicate a quid pro quo relationship between “Evil Corps” and the FSB, where the FSB allows “Evil Corps” to commit cybercrime unhindered and Yakubets’ operation in turn helps the FSB with intelligence gathering.

About This Incident

Threat Actors: Russia

Incident Metadata

Date: 2009-present
Country: United States