{"id":108760,"date":"2017-07-28T05:59:26","date_gmt":"2017-07-28T09:59:26","guid":{"rendered":"https:\/\/canadianinquirer.net\/v1\/?p=108760"},"modified":"2017-07-28T06:02:24","modified_gmt":"2017-07-28T10:02:24","slug":"big-hunt-for-russian-hackers-but-no-obvious-election-link","status":"publish","type":"post","link":"https:\/\/canadianinquirer.net\/v1\/2017\/07\/28\/big-hunt-for-russian-hackers-but-no-obvious-election-link\/","title":{"rendered":"&#8216;Big hunt&#8217; for Russian hackers, but no obvious election link"},"content":{"rendered":"<p>&nbsp;<\/p>\n<p style=\"background: white;text-align: start\"><span style=\"font-size: 13.5pt;color: black\">MOSCOW \u2013 Pyotr Levashov appeared to be just another comfortable member of Russia&#8217;s rising middle-class \u2013 an IT entrepreneur with a taste for upmarket restaurants, Thai massages and foreign travel.Then police raided his vacation rental in Barcelona, marching him out in handcuffs to face charges of being one of the world&#8217;s most notorious spam lords.<\/span><\/p>\n<p style=\"background: white;text-align: start\"><span style=\"font-size: 13.5pt;color: black\">Levashov&#8217;s April 7 arrest was one in a series of<br \/>\nAmerican-initiated operations over the past year to seize alleged<br \/>\nRussian cybercriminals outside their homeland, which has no<br \/>\nextradition agreement with the United States.<\/span><\/p>\n<p style=\"background: white;text-align: start\"><span style=\"font-size: 13.5pt;color: black\">They come at a fraught moment in relations between Moscow and Washington, where politicians are grappling with the allegation that Kremlin hackers intervened in the U.S. election to help President Donald Trump. Through their lawyers, several defendants have suggested their arrests are linked to the election turmoil. Experts say that&#8217;s possible, though an Associated Press review of the cases found no firm evidence to back the claim.<\/span><\/p>\n<p style=\"background: white;text-align: start\"><span style=\"font-size: 13.5pt;color: black\">\u201cThere is a big hunt underway,\u201d said Andrei Soldatov, an expert on the Russian security services and co-author of \u201cRed Web,\u201d a book about Russian attempts to control the internet. He said the recent burst of arrests made it look like the United States was \u201ctrying to understand what&#8217;s going on with a very complicated world of Russian hacking and a very complicated relationship between Russian hackers and Russian secret services.\u201d<\/span><\/p>\n<p style=\"background: white;text-align: start\"><span style=\"font-size: 13.5pt;color: black\">But Soldatov didn&#8217;t rule out another possible explanation: The imprisoned Russians may be falsely tying their arrests to Trump&#8217;s election in a bid to sow confusion and politicize their cases.<\/span><\/p>\n<p style=\"background: white;text-align: start\"><span style=\"font-size: 13.5pt;color: black\">\u201cIt&#8217;s a very big question,\u201d he said.<\/span><\/p>\n<p style=\"background: white;text-align: start\"><span style=\"font-size: 13.5pt;color: black\">___<\/span><\/p>\n<p style=\"background: white;text-align: start\"><span style=\"font-size: 13.5pt;color: black\">\u201cHE GOT TO EVERY MAILBOX THERE EVER WAS\u201d<\/span><\/p>\n<p style=\"background: white;text-align: start\"><span style=\"font-size: 13.5pt;color: black\">At least five Russians have been picked up in Europe as part of U.S. cybercrime prosecutions in the last nine months.<\/span><\/p>\n<p style=\"background: white;text-align: start\"><span style=\"font-size: 13.5pt;color: black\">Evgeny Nikulin, 29, was arrested in a restaurant in Prague in October, accused of hacking into LinkedIn and Dropbox around the time that tens of millions of users there were compromised; Stanislav Lisov, 31, the alleged developer of the NeverQuest financial data-stealing software, was detained at Barcelona&#8217;s airport during his honeymoon in January; and Yury Martyshev, 35, accused of helping run a service that let cybercriminals test-drive their malicious software, was recently extradited to the U.S. after being pulled off a train at the Russia-Latvia border in April. On Tuesday, Alexander Vinnik, 38, was arrested at his hotel in Greece on charges of running a money laundering ring for hackers that processed billions of dollars in digital currency.<\/span><\/p>\n<p style=\"background: white;text-align: start\"><span style=\"font-size: 13.5pt;color: black\">Levashov, who made his first court appearance in Madrid for a brief hearing Wednesday, is easily the best known of the five. The 36-year-old is charged with fraud and unauthorized interception of electronic communications, but his spamming career is said to stretch back to the turn of the millennium, when the business of stuffing email inboxes full of pitches for cut-price pills and penny stocks was still largely unregulated.<\/span><\/p>\n<p style=\"background: white;text-align: start\"><span style=\"font-size: 13.5pt;color: black\">Court documents trace how Levashov, using the alias Peter Severa, teamed up in 2005 with Alan Ralsky, an American bulk email baron once dubbed the \u201cKing of Spam.\u201d<\/span><\/p>\n<p style=\"background: white;text-align: start\"><span style=\"font-size: 13.5pt;color: black\">Ralsky described the Russian as a master of his trade.<\/span><\/p>\n<p style=\"background: white;text-align: start\"><span style=\"font-size: 13.5pt;color: black\">\u201cHe made me look like an amateur,\u201d Ralsky said in a recent interview. \u201cHe got to every mailbox there ever was.\u201d<\/span><\/p>\n<p style=\"background: white;text-align: start\"><span style=\"font-size: 13.5pt;color: black\">Spammers can make a lot renting out their services to those peddling grey market pharmaceuticals or pornography. Ralsky said Levashov was pulling in \u201cmore money than you could shake a stick at\u201d and travelled widely, saying he remembered getting vacation snaps of the Russian enjoying himself at a fishing cabin in Finland or the famously expensive Burj Al Arab hotel in Dubai.<\/span><\/p>\n<p style=\"background: white;text-align: start\"><span style=\"font-size: 13.5pt;color: black\">By then, Levashov had crossed American law enforcement&#8217;s radar.<\/span><\/p>\n<p style=\"background: white;text-align: start\"><span style=\"font-size: 13.5pt;color: black\">In 2007, he was indicted under his Severa alias as part of the case where Ralsky and several associates pleaded guilty to charges including wire fraud and mail fraud. Two years later, American authorities identified Levashov by name as the operator of the \u201cStorm\u201d botnet, a massive network of compromised, spam-spewing computers.<\/span><\/p>\n<p style=\"background: white;text-align: start\"><span style=\"font-size: 13.5pt;color: black\">In the Russian hacker community, Levashov&#8217;s profile was rising too. In online forums, he promoted the idea of collaborating with Russia&#8217;s spy services, according to Soldatov, the Russian intelligence expert, who said Levashov spearheaded an effort to knock out websites linked to Islamist insurgencies in southern Russia.<\/span><\/p>\n<p style=\"background: white;text-align: start\"><span style=\"font-size: 13.5pt;color: black\">\u201cHe was the first Russian hacker known to have brought the FSB into the circle of the Russian hacking community,\u201d Soldatov said, referring to Russia&#8217;s domestic spy agency. \u201cHis idea was to make it more patriotic.\u201d<\/span><\/p>\n<p style=\"background: white;text-align: start\"><span style=\"font-size: 13.5pt;color: black\">When Levashov was finally caught, his wife Maria drew international attention when she was quoted as saying the arrest was \u201clinked to Trump&#8217;s win.\u201d But in a conversation with The Associated Press in Madrid on Wednesday, she pulled back from those comments.<\/span><\/p>\n<p style=\"background: white;text-align: start\"><span style=\"font-size: 13.5pt;color: black\">\u201cI think there are some political reasons in this case, but I&#8217;m not sure,\u201d she said. \u201cI don&#8217;t have any evidence.\u201d<\/span><\/p>\n<p style=\"background: white;text-align: start\"><span style=\"font-size: 13.5pt;color: black\">Levashov&#8217;s lawyer, Margarita Repina, offered a similar qualification to her assertion that U.S. officials were \u201cjust taking hackers with any excuse to see if any of them admits involvement in the Trump issue.\u201d<\/span><\/p>\n<p style=\"background: white;text-align: start\"><span style=\"font-size: 13.5pt;color: black\">\u201cThis is just an opinion,\u201d she said. \u201cWe have no evidence.\u201d<\/span><\/p>\n<p style=\"background: white;text-align: start\"><span style=\"font-size: 13.5pt;color: black\">Legal documents suggest the latest effort to catch Levashov began well before the election. In a sworn declaration, FBI Agent Elliott Petersen said he began tracking Kelihos, the latest incarnation of Levashov&#8217;s alleged spam botnet operation, more than two years ago.<\/span><\/p>\n<p style=\"background: white;text-align: start\"><span style=\"font-size: 13.5pt;color: black\">The former spam king was also skeptical that Levashov&#8217;s arrest was linked to the vote.<\/span><\/p>\n<p style=\"background: white;text-align: start\"><span style=\"font-size: 13.5pt;color: black\">\u201cThey&#8217;ve been after him for a long time,\u201d Ralsky said.<\/span><\/p>\n<p style=\"background: white;text-align: start\"><span style=\"font-size: 13.5pt;color: black\">___<\/span><\/p>\n<p style=\"background: white;text-align: start\"><span style=\"font-size: 13.5pt;color: black\">\u201cTHERE IS A CHESS GAME THAT ESCAPES US\u201d<\/span><\/p>\n<p style=\"background: white;text-align: start\"><span style=\"font-size: 13.5pt;color: black\">Levashov wouldn&#8217;t be alone in floating thinly supported claims that his prosecution is related to the 2016 election. Lisov was also arrested in Barcelona and spent a month as Levashov&#8217;s cellmate in Madrid. His attorney, Juan Manuel Arroyo, told an extradition hearing last week that there was \u201ca game of chess that escapes us\u201d between Moscow and Washington. Arroyo suggested that the American extradition request was \u201cnot normal.\u201d<\/span><\/p>\n<p style=\"background: white;text-align: start\"><span style=\"font-size: 13.5pt;color: black\">A Spanish court document seen by AP suggests Lisov has been sought by the U.S. since Aug. 5, 2015, undermining the idea of an election link. Arroyo says he disputes the existence of any such request.<\/span><\/p>\n<p style=\"background: white;text-align: start\"><span style=\"font-size: 13.5pt;color: black\">Nikulin, who is the subject of a conflicting extradition request from Russia, has been the most explicit. He told a judge in Prague that he was twice taken out of prison and offered a pardon, U.S. citizenship and refuge for his parents if he confessed to having \u201chacked the Democratic Party\u201d on the Russian government&#8217;s orders, an apparent reference to the embarrassing leak of Democratic National Committee emails in the heat of the U.S. race.<\/span><\/p>\n<p style=\"background: white;text-align: start\"><span style=\"font-size: 13.5pt;color: black\">Nikulin said he rejected the offer, and his lawyer Vladimir Makeev later wrote a rambling letter warning Trump that the bureau was railroading Nikulin to undermine his presidency.<\/span><\/p>\n<p style=\"background: white;text-align: start\"><span style=\"font-size: 13.5pt;color: black\">In an interview at his office in Moscow, Makeev said his client was being pressured by \u201ccertain unscrupulous representatives of the FBI that wish to have an impeachment carried out on president of the United States.\u201d<\/span><\/p>\n<p style=\"background: white;text-align: start\"><span style=\"font-size: 13.5pt;color: black\">There&#8217;s little evidence for the inflammatory claim.<\/span><\/p>\n<p style=\"background: white;text-align: start\"><span style=\"font-size: 13.5pt;color: black\">Nikulin was in fact questioned in the presence of an FBI agent from the bureau&#8217;s San Francisco office, according to a Russian-language legal document which Makeev shared with AP.<\/span><\/p>\n<p style=\"background: white;text-align: start\"><span style=\"font-size: 13.5pt;color: black\">But there&#8217;s no indication the agent _ who was one of 10 officials, translators and defence lawyers listed as being present at the interrogation _ ever discussed the election or made Nikulin an offer, much less of citizenship. The FBI would not make the agent available for an interview but a law enforcement official said no such deal was ever discussed. The official was not authorized to discuss the matter publicly and spoke on condition of anonymity.<\/span><\/p>\n<p style=\"background: white;text-align: start\"><span style=\"font-size: 13.5pt;color: black\">Martyshev&#8217;s attorney did not return messages seeking comment, but the Russian pleaded not guilty to all charges at a court hearing in Alexandria earlier this month.<\/span><\/p>\n<p style=\"background: white;text-align: start\"><span style=\"font-size: 13.5pt;color: black\">Levashov may soon be joining him in America. His extradition to the United States seems a foregone conclusion, according to Repina, his attorney. She argued that would hardly be fair given that, in Russia, the spamming he&#8217;s alleged to have carried out may not even be a crime.<\/span><\/p>\n<p style=\"background: white;text-align: start\"><span style=\"font-size: 13.5pt;color: black\">\u201cIn his country, Levashov has legal businesses and a family that he needs to provide for,\u201d she said. \u201cHe is a patriot.\u201d<\/span><\/p>\n<p style=\"background: white;text-align: start\"><span style=\"font-size: 13.5pt;color: black\">___<\/span><\/p>\n<p style=\"background: white;text-align: start\"><span style=\"font-size: 13.5pt;color: black\">Satter reported from Paris. Parra reported from Madrid. Diego Torres in Madrid, Ahmad Katib in Moscow, Eric Tucker in Washington and Karel Janicek in Prague contributed to this report.<\/span><\/p>\n","protected":false},"excerpt":{"rendered":"<p>&nbsp; MOSCOW \u2013 Pyotr Levashov appeared to be just another comfortable member of Russia&#8217;s rising middle-class \u2013 an IT entrepreneur &hellip;<\/p>\n","protected":false},"author":33,"featured_media":108356,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[1],"tags":[],"class_list":["post-108760","post","type-post","status-publish","format-standard","has-post-thumbnail","category-uncategorized","mauthors-howard-amos","mauthors-raphael-satter","mauthors-aritz-parra","mauthors-the-associated-press"],"_links":{"self":[{"href":"https:\/\/canadianinquirer.net\/v1\/wp-json\/wp\/v2\/posts\/108760","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/canadianinquirer.net\/v1\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/canadianinquirer.net\/v1\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/canadianinquirer.net\/v1\/wp-json\/wp\/v2\/users\/33"}],"replies":[{"embeddable":true,"href":"https:\/\/canadianinquirer.net\/v1\/wp-json\/wp\/v2\/comments?post=108760"}],"version-history":[{"count":0,"href":"https:\/\/canadianinquirer.net\/v1\/wp-json\/wp\/v2\/posts\/108760\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/canadianinquirer.net\/v1\/wp-json\/wp\/v2\/media\/108356"}],"wp:attachment":[{"href":"https:\/\/canadianinquirer.net\/v1\/wp-json\/wp\/v2\/media?parent=108760"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/canadianinquirer.net\/v1\/wp-json\/wp\/v2\/categories?post=108760"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/canadianinquirer.net\/v1\/wp-json\/wp\/v2\/tags?post=108760"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}