Mark Sokolovsky, a 28-year-old Ukrainian national, has been extradited to the US from the Netherlands to face charges related to a sophisticated cybercrime scheme involving the Raccoon Infostealer malware. The extradition comes after Sokolovsky was indicted for crimes including fraud, money laundering, and aggravated identity theft.
Court documents reveal that Sokolovsky allegedly conspired to operate the Raccoon Infostealer as a malware-as-a-service (MaaS) platform. The scheme involved leasing access to the malware for approximately $200 per month, with payments made in cryptocurrency. Those who deployed the Raccoon Infostealer used various deceptive tactics, such as email phishing, to infect victims' computers. Once installed, the malware would harvest personal data, including login credentials, financial information, and other sensitive records. This stolen data was then utilized to commit financial crimes or sold on cybercrime forums.
The arrest of Sokolovsky by Dutch authorities in March 2022 coincided with a coordinated effort by the FBI and law enforcement agencies in Italy and the Netherlands to dismantle the digital infrastructure supporting the Raccoon Infostealer, effectively shutting down its operations at the time.
Sokolovsky faces multiple charges, including conspiracy to commit fraud and related activity in connection with computers, conspiracy to commit wire fraud, conspiracy to commit money laundering, and aggravated identity theft. He appeared in court for an initial hearing on February 9 and is currently being held in custody pending trial.
The FBI has been actively investigating the cybercrime operation and has retrieved substantial amounts of stolen data from compromised computers, totaling more than 50 million unique credentials and forms of identification. However, authorities believe that not all the data stolen by the Raccoon Infostealer has been recovered, and investigations are ongoing.