PRIMARY SOURCE DB
MITRE ATT&CK v15.1
Page built 2026-09-25
Data as of September 24, 2026 at 17:02 UTC
Search
CASE DOSSIER sentenced

U.S. v. Aleksandr Brovko (Botnet Parsing & Credential Sales)

Docket: 1:20-cr-00037 Court: U.S. District Court for the Eastern District of Virginia Opened: 2020-02-12 Sector: Consumer Finance, Banking

Key Facts

Status
SENTENCED
Legal disposition
Loss Amount
$100.0 million
Parsed stolen data contributing to more than $100 million in estimated consumer fraud losses.
Techniques
1
Verified mappings
Defendants
1
Named in charges
  • Legal Status: SENTENCED in U.S. District Court for the Eastern District of Virginia.
  • Primary Target Sector: Consumer Finance, Banking.
  • Documented Financial Loss: $100.0 million.
  • 1 verified MITRE ATT&CK techniques substantiated with verbatim court excerpts.
Export structured case data and MITRE ATT&CK Navigator layer:
Download Navigator Layer (JSON) Case Data (JSON)

Case Summary

Russian national who developed automated scripts to parse botnet logs, extracting financial information and account credentials from thousands of victim computers and marketing them on cybercrime forums.

Procedural & Incident Timeline

2020-02-14 plea

Pleads guilty to conspiracy to commit wire fraud and computer intrusion.

2020-10-30 sentencing

Sentenced to 96 months (8 years) in federal prison.

Named Defendants & Operatives

Defendant Nationality Status Prison Term Restitution Notes
Aleksandr Brovko Russian Federation sentenced 96 mo None Botnet log parser sentenced to 8 years in federal prison in E.D. Va.

Substantiated MITRE ATT&CK Techniques

Technique ID Technique Name & Tactic Primary Source Evidence Excerpt Locator Verification
T1555 Credentials from Password Stores
Credential Access
 "Defendant wrote Python scripts to parse massive unorganized text files exfiltrated by info-stealer trojans to isolate valid credit card numbers and passwords." Plea Agreement ¶ 4, Page 5 reviewed

Cite & Embed This Case Record

Public Domain / CC0
Bluebook Legal Citation:
Cyberattack Case Library, U.S. v. Aleksandr Brovko (Botnet Parsing & Credential Sales), No. 1:20-cr-00037 (U.S. District Court for the Eastern District of Virginia 2020), https://cyberattackcaselibrary.pages.dev/cases/us-v-brovko-botnet-logs/
Embeddable Incident Card (HTML):
<iframe src="https://cyberattackcaselibrary.pages.dev/embed/case/us-v-brovko-botnet-logs" width="100%" height="220" style="border:none; border-radius:6px;" loading="lazy"></iframe>