Compliance Management, Threat Management, Government Regulations, Malware, Phishing

U.S. indicts three over alleged phishing campaign targeting universities, businesses

The Department of Justice has indicted two Americans and a Nigerian on multiple charges for their alleged roles in a phishing scheme that targeted college employees, banks and other businesses from May 2013 through June 2014.

Filed on Tuesday in U.S. District Court in New Mexico, the indictment identifies the defendants as Nigerian citizen Otuokere Sunday (aka Hulac Yun and Charles Quartz), and Americans Samantha Almodovar and Ardarari Byas, who were at one time students at the University of New Mexico and Southern Illinois University, respectively.

The DOJ alleges the trio was also aided by three additional unnamed co-conspirators, including another UNM student and two residents of China who acted as money mules. At least some of the unnamed mules were "unwitting" accomplices, the indictment states at one point.

The indictment accuses the three named defendants of sending phishing emails to at least 15 universities and three health care systems, tricking at least 50 employees into clicking on links that routed them to scam web pages with fake login screens. Thinking they were legitimately logging into employee accounts, the targets entered their payroll usernames and passwords. The defendants then allegedly used those credentials to access victims' accounts and reroute their electronic payments to various money mules, who ultimately wired the funds to Nigeria.

Federal prosecutors have charged Sunday, Almodovar and Byas with one count of conspiracy to commit wire fraud and bank fraud, one count of conspiracy to commit computer fraud and identity theft, two counrts of wire fraud and one count of conspiracy to commit money laundering.

Bradley Barth

As director of multimedia content strategy at CyberRisk Alliance, Bradley Barth develops content for online conferences, webcasts, podcasts video/multimedia projects — often serving as moderator or host. For nearly six years, he wrote and reported for SC Media as deputy editor and, before that, senior reporter. He was previously a program executive with the tech-focused PR firm Voxus. Past journalistic experience includes stints as business editor at Executive Technology, a staff writer at New York Sportscene and a freelance journalist covering travel and entertainment. In his spare time, Bradley also writes screenplays.

Get daily email updates

SC Media's daily must-read of the most current and pressing daily news

By clicking the Subscribe button below, you agree to SC Media Terms and Conditions and Privacy Policy.