Government release

# Russian National and Leader of Qakbot Malware Conspiracy Indicted in Long-Running Global Ransomware Scheme

U.S. Attorney's Office, Central District of California, May 22, 2025. Gallyamov charge, continued operation after the 2023 takedown.

**Source type:** Government release

**Published:** May 22, 2025

**Research grade:** P1

**Used in entries:** 6

## Bibliographic record

**Publisher:** U.S. Attorney's Office, Central District of California

**Published:** May 22, 2025

**Source type:** Government release

**Research grade:** Source grade P1

**Language:** English

**Official record:** Official publication

**Address:** [https://www.justice.gov/usao-cdca/pr/russian-national-and-leader-qakbot-malware-conspiracy-indicted-long-running-global](https://www.justice.gov/usao-cdca/pr/russian-national-and-leader-qakbot-malware-conspiracy-indicted-long-running-global)

**What it supports:** Gallyamov charge, continued operation after the 2023 takedown

**Dataset id:** src\_doj\_qakbot\_gallyamov\_2025

How this source is used

Cited 6 times across 4 record types.

The role on each citation records what the source was relied on for. A primary source establishes the fact, a supporting source corroborates it, technical evidence describes the infrastructure, and a later outcome records what happened afterwards.

Sources were reviewed to a research cutoff of August 23, 2026. Addresses recorded after that date are not reflected here.

## Cited by

### Takedown records

1 citation

Cited on the takedown record itself.

-
[Operation Endgame wave 2](https://takedownindex.org/takedowns/operation-endgame-wave-2)

Multi threat campaign, May 2025

Supporting source

### Organization roles

2 citations

Cited for an organization's recorded role in a takedown.

-
[United States Attorney's Office for the Central District of California](https://takedownindex.org/takedowns/operation-endgame-wave-2)

Charging, Operation Endgame wave 2

Primary source
-
[Federal Bureau of Investigation](https://takedownindex.org/takedowns/operation-endgame-wave-2)

Investigating, Operation Endgame wave 2

Primary source

### Legal actions against people

2 citations

Cited for a recorded legal action against a named person.

-
[Rustam Rafailevich Gallyamov](https://takedownindex.org/people/rustam-rafailevich-gallyamov)

Indicted, Operation Endgame wave 2

Primary source
-
[Rustam Rafailevich Gallyamov](https://takedownindex.org/people/rustam-rafailevich-gallyamov)

Publicly wanted, Operation Endgame wave 2

Primary source

### Later activity

1 citation

Cited for activity recorded after the takedown.

-
[Qakbot continued operation](https://takedownindex.org/takedowns/operation-duck-hunt)

Same operators, Operation Duck Hunt

Primary source

[All sources](https://takedownindex.org/sources)