U.S. DOJ Indicts Ukrainian National Over Involvement with Russian State-Sanctioned Cyberattack Groups
The U.S. Department of Justice has indicted Victoria Eduardovna Dubranova, a 33-year-old Ukrainian national extradited earlier this year, for her involvement with two Russian state-sanctioned cyberattack groups known as CARR (CyberArmyofRussia_Reborn) and NoName.
The charges against Dubranova include conspiracy to damage protected computers. Additional charges related to CARR include tampering with public water systems, access device fraud, and aggravated identity theft. Members of NoName were paid in cryptocurrency and claimed responsibility for hundreds of cyberattacks worldwide.
NoName's operations featured global distributed denial-of-service (DDoS) campaigns and were publicized on the messaging platform Telegram, which they used for recruitment and maintaining leaderboards. CARR funded subscriptions for DDoS-as-a-service, while NoName developed proprietary DDoS software.
Attacks attributed to CARR targeted public drinking water systems across multiple U.S. states, a Los Angeles meat processing facility in November 2024, and election infrastructure. NoName campaigns reportedly included numerous global attacks, with details openly shared on Telegram.
The Russian government provided financial support to both groups, with cryptocurrency donations used to purchase DDoS infrastructure. Blockchain analytics aided in identifying on-chain transactions related to these activities.
Dubranova's trial dates are set for February 3, 2026, for NoName-related charges and April 7, 2026, for CARR-related charges. She faces potential penalties of up to 27 years imprisonment for CARR-related offenses and up to 5 years for NoName-related offenses.
