Thursday, January 30, 2025

The Story of Maksim Yakubets, aka "Aqua" – The Cybercrime Kingpin

Posted by Abdullah Zaheer on Thursday, January 30, 2025 | No comments

The Story of Maksim Yakubets, aka "Aqua" – The Cybercrime Kingpin

Maksim Yakubets

Introduction  

Maksim Viktorovich Yakubets, better known by his hacker alias "Aqua" is one of the most notorious cybercriminals in the world. He is the alleged leader of  Evil Corp a Russian cybercrime group responsible for some of the most devastating cyberattacks, including the deployment of the Zeus and Dridex malware. These attacks have led to financial losses exceeding $100 million worldwide.  

Yakubets is not just a skilled hacker—he is known for his lavish lifestyle, luxury cars, and possible ties to Russian intelligence agencies. Despite being one of the FBI’s most wanted cybercriminals, he continues to evade capture, making his story one of the most fascinating cases in modern cybercrime history.  

Early Life and Entry into Cybercrime 

Maksim Yakubets was born on May 20, 1987, in Polonne, Ukraine, and later moved to Russia. Not much is known about his early years, but by his twenties, he had already made a name for himself in the cybercriminal underworld.  

His journey into hacking began with his involvement in Zeus malware, one of the most dangerous banking trojans of the early 2000s. The malware worked by infecting victims' computers and stealing banking credentials, which were then used to drain bank accounts.  

By 2009, Yakubets was already working as a leading developer for the Zeus malware, running large-scale phishing campaigns targeting individuals and businesses worldwide. The stolen money was laundered through a network of  money mules and offshore accounts.

Uk Reveals father and son at the heart of Evil Corp hackers

Maksim Yabubets, his father Viktor and brother Artem are accused of running Evil Corp

The UK, US and Australia have announced sanctions against 16 people authorities accuse of being part of the most wanted cyber crime gang in the world.

Russia-based Evil Corp is accused of stealing around $300m in nearly ten years of hacking.

The UK’s National Crime Agency (NCA) says it can now reveal the gang’s notorious leader, Maksim Yakubets, has been supported by his father Viktor Yakubets - something he had denied when interviewed by the BBC in 2021.

The information has been released as part of a large, multinational operation to disrupt Evil Corp and another notorious hacking group called LockBit.

Known for their mafia-style of operation, Evil Corp has waged a campaign of destructive cyber-attacks worldwide for over a decade.

In 2019, Maksim Yakubets was sanctioned and a $5m bounty was put up for his arrest, along with another man called Igor Turashev.

Other Russian individuals, including Yakubets' brother Artem, were also named as part of the US sanctions and designations.

In 2021 the BBC travelled to Russia to search for and interview members of the gang to get their side of the story.

At a former home of Maksim Yakubets we found his father, who gave an impassioned defence of his son while claiming he was personally innocent.

But now the NCA says that Yakubets senior was a major part of the cyber-crime group, accusing him of aiding the gang in laundering some of its stolen funds.

As well as the Yakubets family members, Maksim's father-in-law was also sanctioned for helping to protect and coordinate the group with his connections to the Russian security services.

Western authorities have now officially linked Eduard Benderskiy, a former high-ranking FSB official, to Evil Corp.

"Maksim Yakubets and his Evil Corp gang has for years lived the archetypal Russian hacker playboy lifestyle seemingly untouchable to law enforcement but today’s announcement shows that we are still watching, digging and determined to disrupt them and bring them to justice," said Will Lyne, Head of Cyber Intelligence at the NCA. 

Rise of Evil Corp and Dridex Malware

After Zeus became widely known to cybersecurity agencies, Yakubets and his team *evolved their tactics. Around 2014, he became the leader of  Evil Corp a cybercriminal organization responsible for spreading Dridex malware—a highly sophisticated banking trojan that has infected hundreds of thousands of computers worldwide.  

Dridex worked similarly to Zeus but was more advanced, allowing cybercriminals to:  

  • Steal online banking credentials
  • Intercept financial transactions
  • Deliver ransomware payloads to lock victims' systems

Evil Corp primarily targeted businesses, financial institutions, and government agencies across the US, UK, and Europe. The stolen funds were used to *finance Yakubets' extravagant lifestyle*, including:  

  • Custom  Lamborghinis with license plates reading "THIEF"  
  • Multi-million-dollar Luxury estates in Moscow
  • High-end parties and Pet Tigers  

Maksim Yakubets lived what's been described as a playboy lifestyle in Moscow
Despite being a cybercriminal, Yakubets did not hide his wealth—instead, he flaunted it, further cementing his reputation as one of the most audacious hackers in history.  

Links to Russian Intelligence and Government Protection 

One of the most controversial aspects of Yakubets’ story is his alleged ties to Russian intelligence agencies.  

According to US authorities, Yakubets was recruited by the Russian government to carry out cyber operations in exchange for protection. Some sources claim that he has worked for FSB (Russia’s Federal Security Service) and has even conducted hacking operations for the Russian state.  

This could explain why Russia has refused to extradite him, despite international pressure.  

The US Treasury Department has stated that Yakubets has provided "direct assistance to the Russian government," making him not just a cybercriminal but also a potential cyber-weapon for Russia in global cyber warfare.  

The Global Hunt and $5 Million Reward

In December 2019, the US Department of Justice officially charged Yakubets with:  

  • Conspiracy to commit fraud  
  • Wire fraud and bank fraud 
  • Identity theft 
  • Conspiracy to commit money laundering  

The FBI placed him on their "Most Wanted" cybercriminal list and, along with the US State Department, announced a $5 million reward for information leading to his arrest—the largest-ever bounty for a cybercriminal.  

Despite this, Yakubets remains at large in Russia, continuing to operate under the protection of Russian authorities.  

Why He Has Never Been Caught 

Several reasons explain why Yakubets has not been arrested yet:  

1. Russia does not extradite its citizens – Even with overwhelming evidence, Russia refuses to hand him over.  

2. He may be working for the Russian government – His hacking skills could be used for state-sponsored cyber warfare.  

3. He is too valuable to Evil Corp – As the leader of one of the most powerful cybercrime groups, he is protected by a strong criminal network.  

However, law enforcement agencies worldwide continue to monitor his activities, and cybercrime experts believe it’s only a matter of time before he makes a mistake that leads to his capture.  

Conclusion: The Modern-Day Cybercrime King  

Maksim Yakubets, aka "Aqua" is not just another hacker—he is one of the most influential and dangerous cybercriminals of the 21st century.  

His role in Evil Corp, his luxurious lifestyle, and his alleged government connections make him a unique figure in cybercrime history.  

Despite the $5 million bounty on his head, he continues to live freely in Russia, highlighting the growing tension between cybercrime and international law enforcement.  

Until he is arrested, Yakubets remains a symbol of modern cybercriminal power, proving that in today’s digital world, hackers can become as powerful as entire nations.  

Wanted By The FBI

Want to Learn More? 

FBI Most Wanted Page: Maksim Yakubets - FBI  

US Treasury Sanctions on Evil Corp: Treasury.gov Statement  

Full DOJ Indictment: Justice.gov Report  


What are your thoughts on Maksim Yakubets and the world of cybercrime? Let’s discuss in the comments below!

0 Comments: