Security

Uncle Sam puts $10M bounty on Russian troll farm Rybar

Propaganda op focuses on anti-West narratives to meddle with elections


The US has placed a $10 million bounty on Russian media network Rybar and a number of its key staffers following alleged attempts to sway the upcoming US presidential election.

Rybar, according to the US, has consistently tried to stoke division within the country.

Specifically, Rybar manages the social media channels #HOLDTHELINE and #STANDWTHTEXAS, both of which promote pro-Russia political interests. Both taglines have also become synonymous with pro-Republican voting in the US, while the former has even been used in posts by accounts exceeding 1 million followers.

The US contends Rybar was also responsible for the TEXASvsUSA account on X, which has since been suspended for violating the platform's rules. When it was active, its primary aim had been to promote divisive discussions about undocumented migrants crossing the Texas border.

"Through TEXASvsUSA, Rybar has sought to sow discord, promote social division, stoke partisan and racial discord, and encourage hate and violence in the United States," said a statement by Rewards for Justice (RFJ), a State Department initiative.

Over on Telegram, one of the few remaining West-accessible social platforms from which Rybar isn't banned, its feed is filled with news stories that further Russia's political agenda. From sowing distrust in US defense to framing Donald Trump as a potential leader who is against funding Ukraine's war efforts, the channel drives a constant anti-West agenda.

It has also been known to publish a series of comics illustrating Russia's war efforts with more flattering narratives than reality that may be targeting the country's youth.

Rybar is just one lever Russia pulls in its long-running attempts to influence US elections. A recent report from Microsoft hinted at just how much Putin wants a second Trump stint in the White House, and this was just days after a huge crackdown on election-meddling infrastructure.

The media organization is partly funded by contracts awarded by Rostec, a defense organization in Russia that routinely tries to evade sanctions through various means, according to RFJ.

"Rybar relies on the connections and funding from Rostec to bolster Russia's military capabilities and advance pro-Russian and anti-Western narratives," it said.

Rewards of up to $10 million will be handed to anyone with information that can materially further the US efforts to stymie Rybar or nine of its key staffers. The following are of special interest to the US:

RFJ claims that since its inception in 1984, more than $250 million in payments have been made to more than 125 people who helped the US bring people of interest to justice.

Regarding cyberattacks on the US and its critical national infrastructure, there are currently 27 individuals and entities for whom monetary rewards can be provided, should they ever be brought to justice. These include the ALPHV/BlackCat and Conti ransomware groups, plus an assortment of offensive cyber attackers working for or in the interests of Russia, Iran, China, and North Korea.

Rybar and its key staffers join 17 others who earned a spot on the RFJ's bounty list for election interference, which also includes workers for adversarial states and cybercriminals.

US senator Mark Warner (D-VA) suggested earlier this year that the US is less prepared to combat election interference than it was in 2020. This preceded FBI director Christopher Wray's comment days later that this year's election will face more threats from more adversaries equipped with better tech.

A Mandiant report from April warned of interference efforts with both the UK's general election and the upcoming US presidential vote, urging people to be wary of key tools used to compromise election security. Russia and Iran were the primary aggressors here, unsurprisingly.

It alluded to the four Ds: Data theft and leaks, disinformation, deepfakes, and DDoS attacks, although back in August the FBI and CISA felt compelled to dismiss any concerns that DDoSers could hurt voting systems. ®

Send us news
9 Comments

Russian spies use remote desktop protocol files in unusual mass phishing drive

The prolific Midnight Blizzard crew cast a much wider net in search of scrummy intel

Senator accuses sloppy domain registrars of aiding Russian disinfo campaigns

Also, Change Healthcare sets a record, cybercrime cop suspect indicted, a new Mallox decryptor, and more

UK councils bat away DDoS barrage from pro-Russia keyboard warriors

Local authority websites downed in response to renewed support for Ukraine

Skyscraper-high sewage plume erupts in Moscow

Ukrainian hackers again, or just 50+ year old infrastructure showing its age? Either way, it's a mess

Putin's pro-Trump trolls accuse Harris of poaching rhinos

Plus: Iran's IRGC probes election-related websites in swing states

Russian court fines Google $20,000,000,000,000,000,000,000,000,000,000,000

Don't hold your breath Putin

Uncle Sam outs a Russian accused of developing Redline infostealing malware

Or: why using the same iCloud account for malware development and gaming is a bad idea

Belgian cops cuff 2 suspected cybercrooks in Redline, Meta infostealer sting

US also charges an alleged Redline dev, no mention of an arrest

Linus Torvalds affirms expulsion of Russian maintainers

Removal of kernel maintainers linked to Russia attributed to sanctions

China again claims Volt Typhoon cyber-attack crew was invented by the US to discredit it

Enough with the racist-sounding 'dragons' and 'pandas', Beijing complains – then points the finger at koalas

Gang gobbles 15K credentials from cloud and email providers' garbage Git configs

Emeraldwhale looked sharp – until it made a common S3 bucket mistake

Uncle Sam lays out plans for $825M EUV R&D site in New York

Given the cost of EUV litho machines, the Netherlands' ASML might be the real winner here