X

Hacker pleads guilty to conspiring with Russia to breach accounts

Karim Baratov entered the plea after US federal prosecutors indicted him for his role in helping the same hackers who targeted Yahoo accounts in 2014.

Laura Hautala Former Senior Writer
Laura wrote about e-commerce and Amazon, and she occasionally covered cool science topics. Previously, she broke down cybersecurity and privacy issues for CNET readers. Laura is based in Tacoma, Washington, and was into sourdough before the pandemic.
Expertise E-commerce, Amazon, earned wage access, online marketplaces, direct to consumer, unions, labor and employment, supply chain, cybersecurity, privacy, stalkerware, hacking. Credentials
  • 2022 Eddie Award for a single article in consumer technology
Laura Hautala
security-privacy-hackers-locks-key-6778
James Martin/CNET

A hacker charged with helping Russian spies breach email accounts pleaded guilty to federal crimes in San Francisco on Tuesday. 

Karim Baratov pleaded guilty to aggravated identity theft and conspiring to commit computer fraud and abuse. Working with agents from the Russian intelligence agency called FSB, Baratov allegedly hacked into email accounts hosted by Google and Yandex. The same agents were also allegedly responsible for the 2014 hack of Yahoo that compromised 500 million user accounts.

Baratov was indicted in February, along with three alleged co-defendants who are based in Russia. Baratov is a Canadian national.

US Attorney Brian Stretch said in a statement that Baratov is "a prolific criminal hacker who had sold his services to Russian government agents." Baratov stood accused of sending phishing emails to specific email accounts, tricking users into handing over their usernames and passwords, and then sending the login information to Russian agents. The breached accounts were hosted by services like Google and Yandex, which is based in Russia, according to the US Department of Justice.

"This prosecution should send a very clear message to hackers around the world that we will identify and pursue charges against individuals who compromise our country's computer infrastructure," Stretch said.

The hackers accused of breaching Yahoo remain at large in Russia, according to the Justice Department.