Extradited Russian Hacker Faces Charges Over Excel Malware Campaign That Infected Thousands
- ID
- 20607
- Status
- summarized
- Published
- 02 Sep 2026, 5:10 PM
- Fetched
- 02 Sep 2026, 5:57 PM
- Provider
- The Hacker News
- Category
- security
- Original URL
- https://thehackernews.com/2026/09/extradited-russian-hacker-faces-charges.html
- Source URL
- https://feeds.feedburner.com/TheHackersNews
Summary
- Score
- 2.0
- Created
- 02 Sep 2026, 6:06 PM
- Tags
- Audience
- developers
What happened
A Russian national extradited from Cyprus faces U.S. charges for a 2016-2017 campaign that used ~255 fake freelance-platform accounts to send malware-laced Excel attachments to ~80,000 users. The Excel macros downloaded TVRAT (a TeamViewer-exploiting RAT) and DarkVNC, giving remote control of infected machines. Thousands of computers were compromised, with roughly half the victims in the U.S.
Why it matters
This is a decade-old macro-malware case with no new technical detail or actionable takeaway for builders. The only practical reminder is that Excel macro-based social engineering remains a viable attack vector on freelance and gig platforms, but nothing here changes what a working developer should do today.
Discussion angle
Brief mention only: macro-based delivery via freelance platforms is still a real vector if your product or marketplace handles user-uploaded documents—worth a one-line reminder, not a segment.