Ddos 
The global dragnet closing in on the world’s most prolific malware developers has secured a major victory. Hambardzum Minasyan, an Armenian national, made his initial appearance in an Austin federal court this Tuesday following his successful extradition to the United States.
Minasyan stands accused of being a central architect of RedLine, a devastating “infostealer” that has compromised major corporations and millions of individual users worldwide.
RedLine is not just a virus; it is a sophisticated criminal enterprise. According to court documents, Minasyan allegedly conspired to develop and administer the malware, which operates on an “affiliate” model. This allowed other cybercriminals to “rent” the software to conduct their own intrusions.
The DOJ indictment details a sprawling digital infrastructure designed to monetize theft:
- Infrastructure Hosting: Minasyan allegedly registered virtual private servers and internet domains to host RedLine’s command-and-control (C2) servers.
- Distribution Hubs: He is accused of creating repositories on online file-sharing sites to distribute the malware to affiliates.
- Financial Laundering: In November 2021, Minasyan allegedly opened a cryptocurrency account to receive payments from these global affiliates, laundering the proceeds through various exchanges.
As the press release notes:
“The conspirators maintained digital infrastructure, including C2 servers and administrative panels to enable the deployment of the malware by affiliates, and collected payments from RedLine affiliates, allowing the affiliates to use the infostealer against victims”.
The charges against Minasyan are part of a massive international crackdown known as Operation Magnus. In October 2024, the U.S. Department of Justice joined forces with the Netherlands, Belgium, and Eurojust to dismantle RedLine’s current versions.
While authorities have unsealed charges against other alleged co-conspirators, such as developer Maxim Rudometov, Minasyan’s extradition marks a critical step in bringing the group’s leadership to U.S. soil.
Minasyan faces a gauntlet of serious federal charges:
- Conspiracy to commit access device fraud: Up to 10 years in prison.
- Conspiracy to violate the Computer Fraud and Abuse Act: Up to 20 years in prison.
- Conspiracy to commit money laundering: Up to 20 years in prison.
For those who suspect their data may have been harvested by RedLine, international authorities have established a dedicated resource at www.operation-magnus.com. The site provides tools for the public to check if their credentials have been compromised and offers guidance on securing their digital lives.
Support Our Threat Intelligence
If you find our CVE report and cybersecurity news helpful, consider supporting our work.
Buy Me a Coffee
PayPal
