An Iranian national, Sina Gholinejad, has pleaded guilty to charges related to a ransomware scheme that hit Baltimore and other U.S. cities. According to a CBS News report, Gholinejad, 37, admitted to one count of computer fraud and abuse and one count of conspiracy to commit wire fraud, facing up to three decades in jail.
The cyber attacks began in 2019, with the accused and his co-conspirators targeting networks across various sectors. The result was severe disruptions and financial losses of tens of millions, including substantial losses in areas such as Greenville, North Carolina, and Baltimore, Maryland. As gleaned from a FOX Baltimore article, Baltimore's ordeal was especially bruising, with over $19 million in damages and widespread dysfunction of city services, including payments for property taxes, water, and parking citations.
The threat actors employed the RobbinHood ransomware variant to encrypt files on compromised networks and then demanded Bitcoin ransoms for decryption keys. They further attempted to obscure the money trail by using cryptocurrency mixers and shifting funds across different digital currencies, an act often referred to as "chain-hopping." This makes tracking the flow of illegal proceeds significantly more challenging for law enforcement officials.
The case was principally investigated by the FBI's Charlotte Field Office, with "substantial assistance" from its Baltimore Office. "Gholinejad and his co-conspirators orchestrated a ransomware scheme that disrupted lives, businesses, and local governments, and resulted in losses of tens of millions of dollars from unsuspecting victims and institutions," said acting U.S. Attorney Daniel P. Bubar for the Eastern District of North Carolina in a statement, highlighting the extensive impact of such crimes and the importance of bringing those responsible to justice, as reported by FOX Baltimore.
