Canadian Extradited to US Over University Supercomputer Cryptomining Scheme

Ryan James Roach, a 35-year-old Canadian, has been extradited to the United States to face federal prosecution for a multi-year cyber campaign that hijacked university supercomputers to mine cryptocurrency.

A federal grand jury indicted Roach and his co-conspirator, 41-year-old Mathiew James Stubbings of Ontario, on multiple charges including conspiracy to obtain information, causing damage to protected computers, and intentional computer damage. Roach was extradited from Canada on 28 October, while extradition proceedings for Stubbings are currently continuing in Canadian courts.

The indictment alleges that the criminal activity took place between June 2016 and December 2019. During this period, the pair allegedly targeted academic institutions across New York, Massachusetts, North Carolina, and Tennessee.

Technical Tactics and Infrastructure

The suspects allegedly targeted campuses that maintained high-performance supercomputers to maximise their mining efficiency. According to the US Department of Justice (DOJ), the group established a multi-country virtual private server (VPS) infrastructure using fraudulent identities to manage the campaign.

These servers were used to distribute malware and mining software to victimised computers and to store stolen login credentials. Once the attackers gained access to a network, they employed sophisticated reconnaissance tools to expand their access. They frequently used previously compromised machines as pivot points to conceal their original locations and movement within the networks.

The hijacked university hardware was reportedly repurposed to mine Electroneum, a specific cryptocurrency.

Legal Consequences

If convicted of the alleged offences, Roach and Stubbings face a maximum statutory penalty of 10 years in prison and a $250,000 fine for each count.