The Armenian man faces three counts for his role for allegedly administering “one of the most prevalent infostealing malware variants in the world.”

SentinelOne and Beazley Security say the group has been evolving its techniques of late, all with the goal of making money off stolen data.

Russia-based Aeza Group allegedly provided infrastructure to BianLian ransomware and the Meduza, RedLine and Lumma infostealer operators.

Experts told CyberScoop the research 'doesn’t pass a sniff test' and detracts from needed conversations around credential abuse and information stealers.

The successful break-up of DanaBot marks the second high-profile law enforcement disruption of a widespread malware operation in as many days.

Cybercriminals used the prolific malware to target individuals and businesses, including Fortune 500 companies, according to the FBI.

Global law enforcement authorities and Microsoft seized or disrupted the prolific infostealer’s central command infrastructure, malicious domains and marketplaces where the malware was sold.

Inexpensive information-stealing malware surged in 2024, infecting 23 million hosts, according to Flashpoint.