Key facts
- Denis Obrezko, a Russian national, pleaded not guilty to charges of conspiring to commit computer fraud and abuse in Boston.
- Prosecutors allege Obrezko previously worked for Russia's FSB intelligence agency and a tech firm that conducted cyber espionage for the Russian government.
- The alleged campaign targeted U.S. and European companies, NATO-aligned agencies, and organizations supporting Ukraine.
- Obrezko faces a maximum of 10 years in prison if convicted.
- The FBI has identified at least 11 U.S. companies as victims of the alleged hacking operations.
A Russian national, Denis Obrezko, has pleaded not guilty in a Boston federal court to charges related to a cyber espionage campaign allegedly conducted by Russia against Western organizations. Obrezko, who was extradited from Thailand, faces up to 10 years in prison if convicted of conspiring to commit computer fraud and abuse.
Prosecutors claim Obrezko previously worked for Russia's Federal Security Service (FSB) and later for the technology firm Yutek-NN, which allegedly carried out espionage operations at the behest of the Russian government. The indictment states that Obrezko and his associates used tools like fake domain names, VPNs, and proxy servers to extract data from victim companies since at least 2023.
The targets of the alleged campaign, dubbed "Void Blizzard" and "Laundry Bear" by cybersecurity researchers, included U.S. and European companies, NATO-aligned government agencies, and organizations supporting Ukraine. The FBI has identified at least 11 U.S. companies that were hacked, though they believe the actual number of victims is higher.
Court filings also revealed that Obrezko's phone contained AI-generated summaries of over 13,000 stolen emails from members of an Eastern European parliament. Following a Microsoft report detailing the Void Blizzard group's activities in May 2025, Obrezko reportedly corresponded with an individual using the alias 'Ethan Hunt'. Obrezko's lawyer has stated they intend to vigorously contest the charges.