Federal authorities have apprehended a San Fernando Valley resident on federal charges related to an alleged scheme to advertise and distribute malware known as ‘Hive,’ the Justice Department announced today. Edmond Chakhmakhchyan, operating under the alias “Corruption,” was arrested without incident by FBI special agents. Chakhmakhchyan, 24, faces a two-count indictment, alleging his involvement in marketing and selling malware that granted purchasers control over victim computers and access to private communications, login credentials, and personal information.
According to the indictment, Chakhmakhchyan’s role involved posting advertisements for the Hive remote access trojan (RAT) on the “Hack Forums” website, accepting Bitcoin payments for licenses to use the malware, and providing customer service to buyers. Purchasers of the malware could surreptitiously gain control over protected computers, enabling them to manipulate programs, browse files, record keystrokes, intercept communications, and pilfer passwords and credentials without the victim’s knowledge.
Chakhmakhchyan allegedly collaborated with the creator of the Hive RAT, previously known as “Firebird,” approximately four years ago, promoting its capabilities online. Following advertisements, he engaged in electronic communication with purchasers, facilitating the illicit distribution of the malware. The indictment also details instances where Chakhmakhchyan allegedly sold the Hive RAT to individuals intending to exploit victims for financial gain.
The charges against Chakhmakhchyan include conspiracy to advertise a device as an interception device, to transmit a code to intentionally cause damage to a protected computer, and to intentionally access a computer to obtain information. Additionally, he faces a charge of advertising a device as an interception device, each carrying a maximum penalty of five years in federal prison.
The FBI, with substantial assistance from the Australian Federal Police, is leading the investigation. Assistant United States Attorney Sue J. Bai of the Terrorism and Export Crimes Section is prosecuting the case.