An ex-Canadian government employee pleads guilty in Florida court for involvement with NetWalker ransomware group
An ex-Canadian government employee, Sebastien Vachon-Desjardins, aged 34, recently pleaded guilty in a Florida court to charges related to his involvement with the notorious NetWalker ransomware group. The charges included conspiracy to commit computer fraud and wire fraud, intentional damage to a protected computer, and transmitting demands concerning damaging a protected computer.
Vachon-Desjardins was extradited to the United States in March as part of a global crackdown on the NetWalker cyber-criminal gang, initiated in January. According to Justice G.P. Renwick, between May 2020 and January 2021, Vachon-Desjardins targeted 17 Canadian entities and other organizations worldwide by breaching their computer networks, stealing data, and demanding ransom for its safe return.
NetWalker Ransomware Group Overview
NetWalker has been operating since 2019, providing its malware through a ransomware-as-a-service (RaaS) model. A 2020 report by McAfee revealed that NetWalker generated $25 million in just five months that year. Court documents filed in a Florida district court disclosed that the group illicitly obtained a total of 5058 bitcoin (approximately $40 million at the time) in ransom payments, with Vachon-Desjardins being responsible for extorting about 1864 bitcoin.
Renwick described Vachon-Desjardins as one of the most prolific NetWalker ransomware affiliates, with several individuals hiring him to learn his methods. Some of these individuals were likely aspiring cyber threat actors seeking to enhance their skills in securing computer networks or perpetrating similar attacks.
Plea Deal and Sentencing
As part of his plea deal, Vachon-Desjardins has agreed to forfeit all digital assets held in his cryptocurrency wallet and various equipment purchased using illegally obtained funds. The Ontario Court of Justice sentenced him to six years and eight months in prison for his crimes.
The successful prosecution and sentencing of Vachon-Desjardins serve as a significant victory in the fight against cybercrime and the perpetrators behind ransomware attacks. It also sends a strong message that individuals involved in such criminal activities will be held accountable for their actions.