{"id":18256,"date":"2023-04-10T13:12:21","date_gmt":"2023-04-10T13:12:21","guid":{"rendered":"https:\/\/informnapalm.org\/en\/?p=18256"},"modified":"2023-04-12T06:38:32","modified_gmt":"2023-04-12T06:38:32","slug":"hacked-russian-gru-officer","status":"publish","type":"post","link":"https:\/\/informnapalm.org\/en\/hacked-russian-gru-officer\/","title":{"rendered":"Hacked: Russian GRU officer wanted by the FBI, leader of the hacker group APT 28"},"content":{"rendered":"

Ukrainian hacktivist team Cyber Resistance<\/a> hacked the email of Lieutenant Colonel Sergey Alexandrovich Morgachev, an officer of the Russian Main Intelligence Directorate of the General Staff of the Russian Army (GRU), leader of the Russian hacker group APT 28, consisting of officers of the 85th Main Special Service Center of the GRU, military unit #26165. Dumps of his private correspondence were exclusively provided by the hacktivists to the volunteers of InformNapalm<\/a> volunteer intelligence community for analysis.<\/strong><\/p>\n

In this article we will disclose all relevant personal information regarding this Russian intelligence officer wanted by the FBI. We will wrap up with a story of a creative punishment through “moral humiliation” of the Russian hacker by Ukrainian hacktivists with an order on Al\u1ecbExpress.<\/p>\n

<\/div>\n

APT 28 and Lt. Col. Morgachev<\/h2>\n

APT 28 (also widely known as Fancy Bear, Pawn Storm) is one of the most notorious Russian hacker groups accused of many cybercrimes around the world. This structure is directly subordinate to the Russian military intelligence agency. It has carried out numerous cyberattacks against government and non-government targets in the United States, Germany, Italy, Latvia, Estonia, the Czech Republic, Poland, Norway, the Netherlands, Ukraine and other countries. In July 2018, the U.S. Justice Department<\/a> issued a formal indictment of 12 GRU employees for hacking into the servers of the Democratic National Committee (DNC) and attempting to interfere in the U.S. elections. It was established that the structure included the GRU personnel serving in military units #26165 and #74455. Among the 12 names mentioned in the indictment there is an entry about Lieutenant Colonel Sergey Morgachev<\/strong>.<\/p>\n

\"\"<\/a><\/p>\n

By the way, in Morgachev’s mail we found a message from Apple dated 2018 informing him of a request for his account data from the U.S. Federal Bureau of Investigation<\/a> in connection with his newly acquired wanted status.<\/p>\n

\"\"<\/a><\/p>\n

The hacktivists retrieved many interesting details from Morgachev’s emails, both about his personal life and his current place of residence and service in 2023.<\/p>\n

They were also able to obtain numerous images with scans of personal documents of Morgachev and people associated with him.<\/p>\n

\"\"<\/a><\/p>\n

Sergey Aleksandrovich Morgachev<\/strong> was born May 22, 1977 in Kyiv, Ukraine. From 1994 to 1999, he studied at the FSB Academy in Moscow. From 1999 to 2022, he served in the military unit 26165. Read below about his current duty station in 2023.<\/p>\n

He is a Russian citizen. New passport: #4622 608349, issued by the Main Directorate of the Ministry of Internal Affairs of the Russian Federation in Moscow Oblast on 12.07.2022. Registered and resides at:\u00a06\/8 Dekabristov Street, ap. 249, Korolev city, Moscow Oblast, Russia<\/strong>.<\/p>\n

\"\"<\/a><\/p>\n

\"\"<\/a><\/p>\n

He has a Toyota RAV4 car, number plate: \u0420778CB750, driver’s license: #9902 449278.<\/p>\n

\"\"<\/a><\/p>\n

\"\"<\/a><\/p>\n

Title documents for the apartment<\/h2>\n

From the message dated June 29, 2020, we could also confirm Morgachev’s current place of residence and look into the acquisition documents for his apartment.<\/p>\n

\"\"<\/a><\/p>\n