Russian Citizen Charged With Hacking LinkedIn

A Russian man has been charged with hacking and stealing information from computers at LinkedIn and other San Francisco Bay Area companies.

The US attorney’s office in San Francisco has announced that a grand jury indicted 29-year-old Yevgeniy Aleksandrovich Nikulin, of Moscow, Russia, a day earlier on charges including computer intrusion and aggravated identity theft.

Prosecutors say Nikulin used a LinkedIn employee’s credentials to access the company’s computers in 2012. Nikulin is also accused of hacking two other companies, Dropbox and Formspring, and conspiring to sell stolen user names, passwords and email addresses of Formspring customers.

He was arrested on 5 October by officials in the Czech Republic and remains there, according to prosecutors. Russian officials have said they are working to prevent his extradition to the United States.

LinkedIn has suggested that Nikulin’s arrest was tied to a 2012 breach of member information. In May, LinkedIn said the 2012 breach resulted in more than 100 millions of its users’ passwords being compromised, vastly more than had been previously thought.

LinkedIn said in a statement that it appreciated the FBI’s ongoing work to “pursue those responsible for the 2012 breach of LinkedIn member information”.

The indictment alleges three unnamed co-conspirators, one of whom offered to sell the stolen Formspring user information to another for 5,500 euros, or about $6,000 in current US currency.

The US has accused Russia of coordinating the theft and disclosure of emails from the Democratic National Committee and other institutions and individuals in the US to influence the outcome of the election. Russia has denied that.

There was no indication the LinkedIn case was connected to that accusation.

Guardian:

« All Tesla’s Cars Will Have Full Self-Drive
Valuable Security Assets Are Human, Not Technical »

ManageEngine
CyberSecurity Jobsite
Check Point

Directory of Suppliers

CYRIN

CYRIN

CYRIN® Cyber Range. Real Tools, Real Attacks, Real Scenarios. See why leading educational institutions and companies in the U.S. have begun to adopt the CYRIN® system.

ZenGRC

ZenGRC

ZenGRC (formerly Reciprocity) is a leader in the GRC SaaS landscape, offering robust and intuitive products designed to make compliance straightforward and efficient.

Tines

Tines

The Tines security automation platform helps security teams automate manual tasks, making them more effective and efficient.

ManageEngine

ManageEngine

As the IT management division of Zoho Corporation, ManageEngine prioritizes flexible solutions that work for all businesses, regardless of size or budget.

Authentic8

Authentic8

Authentic8 transforms how organizations secure and control the use of the web with Silo, its patented cloud browser.

SecureAuth

SecureAuth

SecureAuth delivers cutting edge identity and information security solutions for cloud, mobile, web, and VPN systems.

Xcina Consulting (XCL)

Xcina Consulting (XCL)

Xcina Consulting provides high quality business and technology risk assurance and advisory services.

Mitre

Mitre

At Mitre we work across government to tackle challenges to the safety, stability, and well-being of our nation. Areas of expertise include Cybersecurity.

MyCyberSecurity Clinic (MyCSC)

MyCyberSecurity Clinic (MyCSC)

MyCyberSecurity Clinic's main goal is toward establishing an international reference centre for excellence in the field of digital forensics and data recovery services.

Unit21

Unit21

Unit21 helps protect businesses against adversaries through a simple API and dashboard for detecting and managing money laundering, fraud, and other sophisticated risks across multiple industries.

Drip7

Drip7

Drip7 is a micro-learning platform that is re-inventing the way companies train their employees and build lasting cultural change around the importance of cybersecurity.

Internet Crime Complaint Center (IC3)

Internet Crime Complaint Center (IC3)

The Internet Crime Complaint Center provide the public with a reporting mechanism to submit information to the FBI concerning suspected Internet-facilitated criminal activity.

Evanssion

Evanssion

Evanssion is a value added distributor specialized in Cloud Native & Cyber Security across Middle East & Africa.

Bright Security

Bright Security

Bright Security is a developer-centric Dynamic Application Security Testing (DAST) solution that helps organizations ship secure applications and APIs quickly and cost-effectively.

Ethiopian Cybersecurity Association (ECySA)

Ethiopian Cybersecurity Association (ECySA)

ECySA was formed to play an influential part in the ongoing and dawning cybersecurity practices of Ethiopia, efficiently creating public and private awareness on all kinds of cyber risks and threats.

Zokyo

Zokyo

Zokyo is a venture studio that builds, secures, and funds legendary web3/crypto businesses.

Avocado Consulting

Avocado Consulting

Avocado helps clients deliver with certainty on their complex IT change, with technology services that automate, monitor and optimise.

Armolon

Armolon

Armolon provides comprehensive data breach and cybersecurity, as well cybersecurity audits and certifications, and disaster recovery/business continuity services to clients.

Sayers

Sayers

Sayers is best known for its ability to solve business challenges with IT solutions. Our areas of expertise include cloud, storage, virtualization, security, mobility and networking.

Leaf IT

Leaf IT

Leaf IT are a pioneering cloud-first MSP, dedicated to helping businesses in the UK and Ireland. We focus on delivering tangible results for our clients through IT transformation.

Multipoint Group

Multipoint Group

Multipoint is an information security and protection solutions company operating in the South EMEA region through value-added distribution channels.