US Indicts Extradited Ukrainian on Charges of Aiding Russian Hacking Groups

A Ukrainian woman, Victoria Eduardovna Dubranova, 33, has been charged in the US in two indictments for alleged ties with Russia-backed hacktivist groups CyberArmyofRussia_Reborn (CARR) and NoName057(16). She faces up to 27 years in prison for her involvement in CARR activities and up to five years for her ties to NoName, after being extradited to the United States earlier this year and entering not guilty pleas in both cases.

The first indictment alleges CARR, also known as Z-Pentest, was founded, financially supported, and supervised by Russia’s military intelligence unit GRU, with attacks against critical infrastructure and a history of targeting ICS and performing DDoS operations. NoName is described as active since March 2022, known for more than 1,500 DDoS attacks and for distributing a proprietary tool called DDoSia, with joint operations noted with CARR in mid-2024. The US has announced bounties of up to $2 million for information on CARR and up to $10 million for information on NoName members.