Advertise
Sohrab Khawas
Sohrab Khawas
Author
Sohrab is a passionate cryptocurrency news writer with over five years of experience covering the industry. He keeps a keen interest in blockchain technology and its potential to revolutionize finance. Whether he's trading or writing, Sohrab always keeps his finger on the pulse of the crypto world, using his expertise to deliver informative and engaging articles that educate and inspire. When he's not analyzing the markets, Sohrab indulges in his hobbies of graphic design, minimal design or listening to his favorite hip-hop tunes.
- Nov 07, 2024 10:07 UTC
-
Digital River Suffers $45K Loss in Cryptojacking Attack; Ex-Employee Held
A former Digital River employee, Joshua Paul Armbrust, is accused of cryptojacking the company's AWS resources, costing them over $45,000.
Armbrust allegedly mined Ethereum without authorization, transferring the cryptocurrency to his Coinbase accounts and withdrawing.
This incident highlights a growing trend of cyberattacks targeting organizations and their digital assets.
An ex-employee of a Minnetonka-based e-commerce and payment processing organization known as Digital River has been charged for engaging in a cryptojacking scheme that was detrimental to the company.
How did they pull it all off?
Joshua Paul Armbrust, 44, from Orr, Minnesota, stands accused of using his previous employer’s Amazon Web Services (AWS) account to secretly mine cryptocurrency between December 2020 and May 2021. The charges were brought to light by Assistant United States Attorney Andrew M. Luger, following an investigation led by the FBI.
Cryptojacking is the unauthorized usage of a computer or other device belonging to another person for cryptocurrency mining; it leads to elevated consumption costs, deterioration of a system’s performance, and increased energy consumption. Armbrust’s use of Digital River’s AWS resources was particularly oriented towards mining Ethereum, which cost more than $45,000 to the firm.
Unauthorized Access and Personal Profits
Armbrust, who resigned from Digital River in February 2020, continued to use the company’s AWS account multiple times after his departure, without permission. Court documents reveal that he used the AWS computing power to mine Ethereum, which he then transferred to two Coinbase accounts registered in his name.
The FBI’s investigation also revealed that Armbrust withdrew over $7,000 in cryptocurrency from his accounts and transferred the funds to his personal Wells Fargo checking account.
A Huge Financial Hit
This covert cryptojacking operation, leveraging Digital River’s cloud infrastructure, caused significant financial strain on the company. As a result, Armbrust now faces one count of computer fraud. He made his first court appearance on November 1, 2024, before Magistrate Judge John F. Docherty.
The FBI, which led the investigation, has highlighted the growing threat of cyber attacks targeting corporate online assets and infrastructure.
A stark reminder that even the most secure organizations can be vulnerable to cyber threats. Stay safe out there!
Yes 
No 
