Russian man indicted for malware campaign on freelancers
A Russian citizen has been indicted by a California federal grand jury for using fake accounts on a freelance employment platform to deliver malware to roughly 80,000 users. Searzhudin Tamirlanovich Aktulaev, 40, faces charges that include conspiracy, transmission of malicious code and aggravated identity theft. He was arrested in Cyprus in May 2025 and extradited to the United States in August 2026.
According to the Department of Justice, the scheme began in June 2016 and involved creating numerous bogus freelancer profiles. The fraudulent accounts posted job offers that appeared legitimate but contained links to malicious files. When freelancers clicked the links, the files installed spyware or other harmful code onto their computers. The malware was designed to capture login credentials, personal data and, in some cases, to turn infected machines into bots for further attacks.
The victims were independent workers who use online platforms to find short‑term projects. By targeting a trusted marketplace, the attackers increased the likelihood that users would download the files without suspicion. The scale of the operation—affecting tens of thousands of freelancers—highlights how attackers exploit the gig economy’s reliance on digital communication.
Law enforcement officials say the indictment is based on extensive digital forensics and witness testimony. While the case is still pending, the charges demonstrate that authorities are pursuing cross‑border cybercrime aggressively. No other individuals have been identified as co‑conspirators at this time.
Freelancers and other online workers can reduce their risk by verifying the authenticity of job postings and the identities of clients before downloading any attachment. Use a reputable antivirus program and keep software up to date to block known malicious code. When a file is unexpected or comes from an unfamiliar source, scan it with a free online scanner such as VirusTotal, which is linked on ComputerScams.com.
Password security is also essential. Change passwords regularly and enable two‑factor authentication on freelance platforms whenever possible. If you suspect that your device has been compromised, disconnect it from the internet, run a full malware scan, and change all passwords from a clean device.
The indictment serves as a reminder that cybercriminals will exploit trusted platforms to reach large numbers of victims. Staying vigilant and following basic cyber security tips can stop many attacks before they cause damage.
Practical safety tip: Before opening any attachment or link from a freelance platform, hover over the URL to see the real destination and run the file through a free online virus scanner.
Source: Read the original report