{"id":571651,"date":"2025-11-15T08:35:32","date_gmt":"2025-11-15T08:35:32","guid":{"rendered":"https:\/\/www.europesays.com\/uk\/571651\/"},"modified":"2025-11-15T08:35:32","modified_gmt":"2025-11-15T08:35:32","slug":"russian-alleged-cyber-hacker-faces-extradition-to-us-after-arrest-in-thailand","status":"publish","type":"post","link":"https:\/\/www.europesays.com\/uk\/571651\/","title":{"rendered":"Russian alleged cyber-hacker faces extradition to US after arrest in Thailand"},"content":{"rendered":"<p class=\"paragraph-elevate inline-placeholder vossi-paragraph\" data-uri=\"cms.cnn.com\/_components\/paragraph\/instances\/cmhzt3saf00pr27qf0om8gs80@published\" data-editable=\"text\" data-component-name=\"paragraph\" data-article-gutter=\"true\">\n            A Russian man wanted for extradition by the United States over cyber-crime allegations has been arrested on the Thai holiday island of Phuket, local police have announced.\n    <\/p>\n<p class=\"paragraph-elevate inline-placeholder vossi-paragraph\" data-uri=\"cms.cnn.com\/_components\/paragraph\/instances\/cmhzu2pno000a3b6n5ol6sbvm@published\" data-editable=\"text\" data-component-name=\"paragraph\" data-article-gutter=\"true\">\n            Denis Obrezko is allegedly part of the notorious group Void Blizzard, Thai police said, a cyber espionage gang recognized by Microsoft for hacking attacks that align with Kremlin interests.\n    <\/p>\n<p class=\"paragraph-elevate inline-placeholder vossi-paragraph\" data-uri=\"cms.cnn.com\/_components\/paragraph\/instances\/cmhzu2pno000b3b6ng2lqx6t3@published\" data-editable=\"text\" data-component-name=\"paragraph\" data-article-gutter=\"true\">\n            The 35-year-old was arrested on November 6 in a joint operation between the FBI and Thai authorities, one week after entering the country on a flight to Phuket, according to Thailand\u2019s Cyber Crime Investigation Bureau (CCIB).\n    <\/p>\n<p class=\"paragraph-elevate inline-placeholder vossi-paragraph\" data-uri=\"cms.cnn.com\/_components\/paragraph\/instances\/cmhzu2pno000c3b6nerzuuif9@published\" data-editable=\"text\" data-component-name=\"paragraph\" data-article-gutter=\"true\">\n            \u201cThis individual had previously breached security systems and attacked government agencies in both Europe and the United States,\u201d the CCIB said Friday.\n    <\/p>\n<p class=\"paragraph-elevate inline-placeholder vossi-paragraph\" data-uri=\"cms.cnn.com\/_components\/paragraph\/instances\/cmhzu2pno000d3b6ndlw9v2xg@published\" data-editable=\"text\" data-component-name=\"paragraph\" data-article-gutter=\"true\">\n            He will be held at the Criminal Court in Bangkok pending extradition to the US, it said.\n    <\/p>\n<p class=\"paragraph-elevate inline-placeholder vossi-paragraph\" data-uri=\"cms.cnn.com\/_components\/paragraph\/instances\/cmhzu2pno000e3b6nvrb8q73p@published\" data-editable=\"text\" data-component-name=\"paragraph\" data-article-gutter=\"true\">\n            Local police had tracked Obrezko down at his hotel room, where they found electronic devices including a notebook computer, mobile phone and digital wallet that were seized for forensic examination, officers said.\n    <\/p>\n<p class=\"paragraph-elevate inline-placeholder vossi-paragraph\" data-uri=\"cms.cnn.com\/_components\/paragraph\/instances\/cmhzu2pno000f3b6nfs1r5f8l@published\" data-editable=\"text\" data-component-name=\"paragraph\" data-article-gutter=\"true\">\n            Microsoft Threat Intelligence (MTI) <a href=\"https:\/\/www.microsoft.com\/en-us\/security\/blog\/2025\/05\/27\/new-russia-affiliated-actor-void-blizzard-targets-critical-sectors-for-espionage\/\" target=\"_blank\" rel=\"noopener\">previously flagged<\/a> Void Blizzard for targeting organizations that Russia opposes, noting its focus on government, defense, transport, media, NGOs and healthcare sectors in the United States and Europe, including Ukraine.\n    <\/p>\n<p class=\"paragraph-elevate inline-placeholder vossi-paragraph\" data-uri=\"cms.cnn.com\/_components\/paragraph\/instances\/cmhzu2pno000g3b6nh737df6t@published\" data-editable=\"text\" data-component-name=\"paragraph\" data-article-gutter=\"true\">\n            \u201cThey often use stolen sign-in details that they likely buy from online marketplaces to gain access to organizations,\u201d researchers said in a statement. \u201cOnce inside, they steal large amounts of emails and files.\u201d\n    <\/p>\n<p class=\"paragraph-elevate inline-placeholder vossi-paragraph\" data-uri=\"cms.cnn.com\/_components\/paragraph\/instances\/cmhzzdiu000043b6nvl6rsmyq@published\" data-editable=\"text\" data-component-name=\"paragraph\" data-article-gutter=\"true\">\n            Russian diplomat Ilya Ilyin, of the Russian embassy in Thailand, confirmed that a Russian citizen was detained on Phuket last week \u201con suspicion of committing cybercrimes,\u201d and that the arrest was \u201callegedly at the official request of the United States,\u201d according to the TASS news agency.\n    <\/p>\n<p class=\"paragraph-elevate inline-placeholder vossi-paragraph\" data-uri=\"cms.cnn.com\/_components\/paragraph\/instances\/cmhzu2pno000h3b6naoyspg04@published\" data-editable=\"text\" data-component-name=\"paragraph\" data-article-gutter=\"true\">\n            CNN has contacted the US Department of Justice for comment.\n    <\/p>\n<p class=\"paragraph-elevate inline-placeholder vossi-paragraph\" data-uri=\"cms.cnn.com\/_components\/paragraph\/instances\/cmhzu2pno000j3b6nqslcc0ji@published\" data-editable=\"text\" data-component-name=\"paragraph\" data-article-gutter=\"true\">\n            Void Blizzard is known for using basic techniques for initial access, including \u201cpassword spraying\u201d where common passwords are systematically applied across multiple usernames, and using stolen authentication details, MTI found.\n    <\/p>\n<p class=\"paragraph-elevate inline-placeholder vossi-paragraph\" data-uri=\"cms.cnn.com\/_components\/paragraph\/instances\/cmhzu2pno000k3b6n5p6chrgn@published\" data-editable=\"text\" data-component-name=\"paragraph\" data-article-gutter=\"true\">\n            \u201cDespite the lack of sophistication in their initial access methods, Void Blizzard has been effective in gaining access to and collecting information from compromised organizations in critical sectors,\u201d MTI added.\n    <\/p>\n<p class=\"paragraph-elevate inline-placeholder vossi-paragraph\" data-uri=\"cms.cnn.com\/_components\/paragraph\/instances\/cmhzu2pno000l3b6nynvkn0di@published\" data-editable=\"text\" data-component-name=\"paragraph\" data-article-gutter=\"true\">\n            Void Blizzard regularly targets government and law enforcement entities, especially in NATO countries and those offering military or humanitarian aid to Ukraine, MTI said.\n    <\/p>\n<p class=\"paragraph-elevate inline-placeholder vossi-paragraph\" data-uri=\"cms.cnn.com\/_components\/paragraph\/instances\/cmhzu2pno000m3b6nlmfy0uko@published\" data-editable=\"text\" data-component-name=\"paragraph\" data-article-gutter=\"true\">\n            The group\u2019s activities have affected various sectors in Ukraine including education, transportation and defense.\n    <\/p>\n","protected":false},"excerpt":{"rendered":"A Russian man wanted for extradition by the United States over cyber-crime allegations has been arrested on the&hellip;\n","protected":false},"author":2,"featured_media":571652,"comment_status":"","ping_status":"","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[5311],"tags":[49,978,659],"class_list":{"0":"post-571651","1":"post","2":"type-post","3":"status-publish","4":"format-standard","5":"has-post-thumbnail","7":"category-united-states","8":"tag-united-states","9":"tag-us","10":"tag-usa"},"share_on_mastodon":{"url":"https:\/\/pubeurope.com\/@uk\/115552801511505704","error":""},"_links":{"self":[{"href":"https:\/\/www.europesays.com\/uk\/wp-json\/wp\/v2\/posts\/571651","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.europesays.com\/uk\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.europesays.com\/uk\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.europesays.com\/uk\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/www.europesays.com\/uk\/wp-json\/wp\/v2\/comments?post=571651"}],"version-history":[{"count":0,"href":"https:\/\/www.europesays.com\/uk\/wp-json\/wp\/v2\/posts\/571651\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.europesays.com\/uk\/wp-json\/wp\/v2\/media\/571652"}],"wp:attachment":[{"href":"https:\/\/www.europesays.com\/uk\/wp-json\/wp\/v2\/media?parent=571651"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.europesays.com\/uk\/wp-json\/wp\/v2\/categories?post=571651"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.europesays.com\/uk\/wp-json\/wp\/v2\/tags?post=571651"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}