A 28-year-old North Royalton man is facing 16 federal charges after authorities say he installed malware onto thousands of computers and using it to watch, listen to, and obtain personal data from unsuspecting victims.
According to the indictment, Phillip R. Durachinsky used a scheme to gain access to protected computers owned by individuals, companies, schools, police, and even a subsidiary of the U.S. Department of Energy between 2003 and 2017. He allegedly installed onto the computers a homemade malware named "Fruitfly" which enabled him control the devices and spy on what users were doing.
Durachinsky was allegedly able to steal victims' personal data, including logon credentials, medical and tax records, and potentially embarrassing searches. Additionally, he was able to turn on webcams and track key strokes to let him know what users were saying or typing.
Some of the conversations, in particular, centered around pornography, and Durachinsky apparently saved millions of images and kept detailed notes.
Said Acting Assistant Attorney General John P. Cronan:
For more than 13 years, Phillip Durachinsky allegedly infected with malware the computers of thousands of Americans and stole their most personal data and communications. This case is an example of the Justice Department's continued efforts to hold accountable cybercriminals who invade the privacy of others and exploit technology for their own ends.
Durachinsky now faces charges of Computer Fraud and Abuse Act violations, Wiretap Act violations, production of child pornography, and aggravated identity theft. The case was investigated by the FBI and will be prosecuted by multiple U.S. Attorneys.
