US indicted Ukrainian for cooperation with Russian hackers

10 December 16:17

The U.S. Department of Justice has announced charges against a Ukrainian woman suspected of collaborating with two Russian state hacking groups, CARR and NoName. The cases are related to cyberattacks against critical infrastructure in the United States and other countries.

This is stated on the department’s website, "Komersant Ukrainian" reports.

The US Department of Justice announced two indictments filed in the Central District of California against Ukrainian citizen Victoria Dubranova, known as “Vika,” “Tory,” and “SovaSonya.” According to the US side, she was involved in cyberattacks on critical infrastructure and other facilities around the world in the interests of the Russian hacker groups CyberArmyofRussia_Reborn (CARR) and NoName057(16).

Dubranova was extradited to the United States earlier this year in the first CARR-related case. Now she faces additional charges in the NoName case. She has pleaded not guilty in both cases. Court hearings in the NoName case are scheduled for February 3, 2026, and in the CARR case for April 7, 2026.

Investigation documents state that the Russian government supported both groups financially. CARR, which the US side associates with the GRU, carried out cyberattacks on public water supply systems, industrial facilities, electoral infrastructure, and government websites in the United States. The consequences included damage to control elements, leaks of drinking water, and the shutdown of certain industries.

The NoName group, according to the US Department of Justice, was part of a government project and used its own DDoS tools to attack government agencies, financial institutions, railroads, and ports in different countries. The attacks involved volunteers from all over the world who were rewarded with cryptocurrency payments.

In the CARR case, Dubranova is charged with conspiracy to damage protected computers and interfere with water supply systems, use of access devices, and identity theft. The maximum penalty for these articles is up to 27 years in prison. In the NoName case, she faces up to five years in prison.

Simultaneously with the charges, the US State Department announced a reward of up to $2 million for information about CARR participants and up to $10 million for NoName. The FBI and other U.S. agencies issued a joint warning about cyber threats associated with these groups. The document states that pro-Russian hacktivists are attacking vulnerable Internet connections and trying to gain access to critical infrastructure control systems.

Анна Ткаченко
Editor

Reading now