Skip to content
NGTEdu Logo

NGTEdu

A PRODUCT OF NGTECH.CO.IN

NGTEdu Logo

NGTEdu

  • Home
  • Cyber Attacks
  • Malware
  • Vulnerabilities
  • Data Breach
  • Home
  • Cyber Attacks
  • Ukrainian Gets 9 Years in Prison for Trying to Steal $10M from Microsoft
  • Cyber Attacks
  • Data Breach

Ukrainian Gets 9 Years in Prison for Trying to Steal $10M from Microsoft

5 years ago David Bisson
Ukrainian Gets 9 Years in Prison for Trying to Steal $10M from Microsoft

A Ukrainian citizen received a nine-year prison sentence for a scheme in which he tried to steal $10 million from Microsoft.

On November 9, the U.S. District Court in Seattle handed down the sentence to Volodymyr Kvashuk, 26, a Ukrainian citizen who was residing in Renton, Washington.

According to court documents, Kvashuk used to work at Microsoft as a software engineer. He was responsible at one point in time for testing the tech giant’s online retail sales platform.

Kvashuk abused this access to steal “currency stored value” (CSV) such as digital gift cards and then to resell the value on the internet. He started off by stealing CSV in amounts of $12,000, but he ultimately escalated his efforts to steal millions of dollars at a time.

The former Microsoft software engineer used that money to purchase a $1.6 million waterfront home and a $160,000 Tesla. He also transferred $2.8 million in bitcoin into his bank and investment accounts, a sum which he said was a gift from a relative on his tax returns.

Along the way, Kvashuk attempted to obscure the digital trail leading back to him. He did so by using a bitcoin “mixing” service to disguise the source of the funds. He also used the test email accounts associated with other employees to help him steal CSV.

Microsoft terminated the Ukrainian citizen in June 2018. Nearly two years later in February 2020, a grand jury found Kvashuk guilty of 18 federal felonies including wire fraud, money laundering and aggravated identity theft.

U.S. Attorney Brian T. Moran was satisfied with the work that the U.S. Department of Justice (DOJ) used to bring Kvashuk to justice. As quoted in a DOJ press release:

Stealing from your employer is bad enough, but stealing and making it appear that your colleagues are to blame widens the damage beyond dollars and cents. This case required sophisticated, technological skills to investigate and prosecute, and I am pleased that our law enforcement partners and the U.S. Attorney’s Office have the skill sets needed to bring such offenders to justice.

In addition to receiving prison time, Kvashuk received an order to pay $8,344,586 in restitution. He also learned that he might be deported after serving his prison sentence.

The post ” Ukrainian Gets 9 Years in Prison for Trying to Steal $10M from Microsoft” appeared first on TripWire

Source:TripWire – David Bisson

Tags: Encryption, Finance, Goverment, Microsoft, TripWire

Continue Reading

Previous Watch Out! New Android Banking Trojan Steals From 112 Financial Apps
Next Microsoft Teams Users Under Attack in ‘FakeUpdates’ Malware Campaign

More Stories

  • Critical Vulnerability
  • Cyber Attacks
  • Data Breach
  • Vulnerabilities

Critical n8n Flaw CVE-2026-25049 Enables System Command Execution via Malicious Workflows

3 hours ago [email protected] (The Hacker News)
  • Critical Vulnerability
  • Cyber Attacks
  • Data Breach
  • Vulnerabilities

Malicious NGINX Configurations Enable Large-Scale Web Traffic Hijacking Campaign

4 hours ago [email protected] (The Hacker News)
  • Cyber Attacks
  • Data Breach

Microsoft Develops Scanner to Detect Backdoors in Open-Weight Large Language Models

15 hours ago [email protected] (The Hacker News)
  • Cyber Attacks
  • Data Breach
  • Malware
  • Vulnerabilities

DEAD#VAX Malware Campaign Deploys AsyncRAT via IPFS-Hosted VHD Phishing Files

16 hours ago [email protected] (The Hacker News)
  • Cyber Attacks
  • Data Breach
  • Malware
  • Vulnerabilities

China-Linked Amaranth-Dragon Exploits WinRAR Flaw in Espionage Campaigns

19 hours ago [email protected] (The Hacker News)
  • Data Breach

Orchid Security Introduces Continuous Identity Observability for Enterprise Applications

21 hours ago [email protected] (The Hacker News)

Recent Posts

  • Critical n8n Flaw CVE-2026-25049 Enables System Command Execution via Malicious Workflows
  • Malicious NGINX Configurations Enable Large-Scale Web Traffic Hijacking Campaign
  • Microsoft Develops Scanner to Detect Backdoors in Open-Weight Large Language Models
  • DEAD#VAX Malware Campaign Deploys AsyncRAT via IPFS-Hosted VHD Phishing Files
  • China-Linked Amaranth-Dragon Exploits WinRAR Flaw in Espionage Campaigns

Tags

Android APT Bug CERT Cloud Compliance Coronavirus COVID-19 Critical Severity Encryption Exploit Facebook Finance Google Google Chrome Goverment Hacker Hacker News High Severity Instagram iPhone Java Linux Low Severity Malware Medium Severity Microsoft Moderate Severity Mozzila Firefox Oracle Patch Tuesday Phishing Privacy QuickHeal Ransomware RAT Sim The Hacker News Threatpost TikTok TripWire VMWARE Vulnerability Whatsapp Zoom
Copyright © 2020 All rights reserved | NGTEdu.com
This website uses cookies to improve your experience. We'll assume you're ok with this, but you can opt-out if you wish. Read More here.Cookie settingsACCEPT
Privacy & Cookies Policy

Privacy Overview

This website uses cookies to improve your experience while you navigate through the website. Out of these cookies, the cookies that are categorized as necessary are stored on your browser as they are essential for the working of basic functionalities of the website. We also use third-party cookies that help us analyze and understand how you use this website. These cookies will be stored in your browser only with your consent. You also have the option to opt-out of these cookies. But opting out of some of these cookies may have an effect on your browsing experience.
Necessary
Always Enabled
Necessary cookies are absolutely essential for the website to function properly. This category only includes cookies that ensures basic functionalities and security features of the website. These cookies do not store any personal information.
Non-necessary
Any cookies that may not be particularly necessary for the website to function and is used specifically to collect user personal data via analytics, ads, other embedded contents are termed as non-necessary cookies. It is mandatory to procure user consent prior to running these cookies on your website.
SAVE & ACCEPT