Digital River Suffers $45K Loss in Cryptojacking Attack; Ex-Employee Held

An ex-employee of a Minnetonka-based e-commerce and payment processing organization known as Digital River has been charged for engaging in a cryptojacking scheme that was detrimental to the company. 

How did they pull it all off?

Joshua Paul Armbrust, 44, from Orr, Minnesota, stands accused of using his previous employer’s Amazon Web Services (AWS) account to secretly mine cryptocurrency between December 2020 and May 2021. The charges were brought to light by Assistant United States Attorney Andrew M. Luger, following an investigation led by the FBI.

Cryptojacking is the unauthorized usage of a computer or other device belonging to another person for cryptocurrency mining; it leads to elevated consumption costs, deterioration of a system’s performance, and increased energy consumption. Armbrust’s use of Digital River’s AWS resources was particularly oriented towards mining Ethereum, which cost more than $45,000 to the firm.

Unauthorized Access and Personal Profits

Armbrust, who resigned from Digital River in February 2020, continued to use the company’s AWS account multiple times after his departure, without permission. Court documents reveal that he used the AWS computing power to mine Ethereum, which he then transferred to two Coinbase accounts registered in his name.

The FBI’s investigation also revealed that Armbrust withdrew over $7,000 in cryptocurrency from his accounts and transferred the funds to his personal Wells Fargo checking account.

• Also Read :
•   Crypto Hacks in October Drain $129 Million – What Went Wrong?
• ,

A Huge Financial Hit

This covert cryptojacking operation, leveraging Digital River’s cloud infrastructure, caused significant financial strain on the company. As a result, Armbrust now faces one count of computer fraud. He made his first court appearance on November 1, 2024, before Magistrate Judge John F. Docherty.

The FBI, which led the investigation, has highlighted the growing threat of cyber attacks targeting corporate online assets and infrastructure.

A stark reminder that even the most secure organizations can be vulnerable to cyber threats. Stay safe out there!