Case 1:11-mj-00321-AK Document 1-1 Filed 05/12/11 Page 1 of 41
7+(81,7('67$7(6',675,&7&2857
)257+(',675,&72)&2/80%,$
81,7('67$7(62)$0(5,&$
3ODLQWLII
Y
$)),'$9,7,168332572)
&5,0,1$/&203/$,17
0$7-$=6.25-$1&
$1')25)(,785($1'
DND“LVHUGR”
$33/,&$7,21)25$55(67
DND“VHUGR”
:$55$176
)/25(1&,2&$55258,=
DND“1H7.”
DND“1HWNDLUR” 0(1725/(1,4, DND“,FHPDQ”
'HIHQGDQWV ,'DQLHO6:LHU]ELFNLD6SHFLDO$JHQWDWWKH)HGHUDO%XUHDXRI,QYHVWLJDWLRQRIWKH
8QLWHG6WDWHV'HSDUWPHQWRI-XVWLFHKHUHLQDIWHUUHIHUUHGWRDVWKHDIILDQWEHLQJGXO\VZRUQRQ
RDWKGHSRVHDQGVWDWHDVIROORZV
,DPD6SHFLDO$JHQWRIWKH)HGHUDO%XUHDXRI,QYHVWLJDWLRQ)%,DVVLJQHGWRWKH
:DVKLQJWRQ)LHOG2IILFH&ULPLQDO&RPSXWHU,QWUXVLRQVTXDGDQGKDYHEHHQHPSOR\HGE\WKH
)%,VLQFHDSSUR[LPDWHO\0DUFK0\WUDLQLQJLQFOXGHVWUDLQLQJLQDZLGHYDULHW\RI
FULPLQDOPDWWHUVDQGVSHFLILFDOO\FRPSXWHUFULPHV$VD6SHFLDO$JHQWRIWKH)%,,DP
DXWKRUL]HGWRLQYHVWLJDWHFULPHVLQYROYLQJYLRODWLRQVRIIHGHUDOODZLQFOXGLQJFRPSXWHUFULPHV
,KDYHUHFHLYHGWUDLQLQJDQGJDLQHGH[SHULHQFHLQLQWHUYLHZLQJDQGLQWHUURJDWLRQWHFKQLTXHV
DUUHVWSURFHGXUHVVHDUFKZDUUDQWDSSOLFDWLRQVWKHH[HFXWLRQRIVHDUFKHVDQGVHL]XUHVFRPSXWHU
Case 1:11-mj-00321-AK Document 1-1 Filed 05/12/11 Page 2 of 41
Case 1:11-mj-00321-AK Document 1-1 Filed 05/12/11 Page 3 of 41
$“ERW”LVDVRIWZDUHSURJUDPWKDWDFWVDVDQDJHQWIRUDXVHU)RUH[DPSOH
FUDZOHUERWVDUHSURJUDPVXVHGIRUVHDUFKLQJWKH,QWHUQHW%RWVFDQDOVREHSURJUDPPHGWR
IXQFWLRQLQDPDOLFLRXVFDSDFLW\DQGFDQRSHUDWHZLWKRXWDQ\RXWZDUGVLJQWKDWZRXOGDOHUWWKH
XVHUWRWKHLUSUHVHQFH)RUH[DPSOHDPDOLFLRXVERWFDQLQVWUXFWDFRPSXWHUWRVHQGVSDPRU
SDUWLFLSDWHLQDF\EHUDWWDFNDJDLQVWDZHEVLWHZLWKRXWWKHXVHU’s knowledge. A bot can also be
used to harvest and transmit the user’s passwords and personal information. Bots are a favored
WRRORIF\EHUFULPLQDOVEHFDXVHWKHVRIWZDUHRQWKH3&DQGWKHXQDXWKRUL]HGQHWZRUNDFWLYLW\DUH
GLIILFXOWWRGHWHFW$IWHUWKH\DUHLQSODFHERWVDUHYHU\GLIILFXOWWRUHPRYHEHFDXVHWKH\DUH
JHQHUDOO\GHVLJQHGWRKLGHWKHPVHOYHVIURPYLUXVVFDQQHUVDQGRWKHUVRIWZDUHWRROV
$“ERWQHW”LVDQHWZRUNRIFRPSXWHUVLQIHFWHGZLWKERWVWKDWDUHXVHGWRFRQWURORU
DWWDFNFRPSXWHUV\VWHPV,WW\SLFDOO\FRQVLVWVRIFRPSXWHUVWKDWKDYHEHHQLQIHFWHGZLWK
PDOLFLRXVFRPSXWHUVRIWZDUHVXFKDVYLUXVHVWURMDQVDQGZRUPV%RWQHWVDUHRIWHQFUHDWHGE\
VSUHDGLQJDFRPSXWHUYLUXVRUZRUPWKDWSURSDJDWHVWKURXJKRXWWKH,QWHUQHWJDLQLQJ
XQDXWKRUL]HGDFFHVVWRFRPSXWHUVRQWKH,QWHUQHWDQGLQIHFWLQJWKHFRPSXWHUZLWKDSDUWLFXODU
ERWSURJUDP7KHERWQHWLVWKHQFRQWUROOHGE\DXVHURIWHQWKURXJKWKHXVHRIDVSHFLILHGFKDQQHO
RQ,QWHUQHW5HOD\&KDW$ERWQHWFDQFRQVLVWRIWHQVRIWKRXVDQGVHYHQPLOOLRQVRILQIHFWHG
FRPSXWHUV7KHERWFRGHDOORZVLQIHFWHGFRPSXWHUVWREHUHPRWHO\FRQWUROOHGE\DPDVWHU
FRPSXWHUFRPPRQO\UHIHUUHGWRDVWKHFRPPDQGDQGFRQWUROVHUYHU7KHFROOHFWLRQRIWKHVH
FRPSXWHUVIRUPVD“ERW”QHWZRUNIURPZKLFKWKHDEEUHYLDWLRQ“ERWQHW”LVGHULYHG7KH
XQVXVSHFWLQJLQIHFWHGRUFRPSURPLVHGFRPSXWHUVDUHRIWHQUHIHUUHGWRDV“]RPELHV”RU“GURQHV”
%RWQHWVDUHXVHGLQIXUWKHUDQFHRIDYDULHW\RIFULPLQDOFRQGXFWLQFOXGLQJIRU
H[DPSOHWKHODXQFKLQJRIGHQLDORIVHUYLFHDWWDFNVGHVLJQHGWRGLVUXSWDQGGLVDEOHWDUJHWHG
FRPSXWHUV\VWHPV“SKLVKLQJ”RUWKHXVHRIDFORQHZHEVLWHWKDWORRNVOLNHDOHJLWLPDWH
Case 1:11-mj-00321-AK Document 1-1 Filed 05/12/11 Page 4 of 41
ZHEVLWHVROLFLWLQJWKHLQSXWRISHUVRQDOLQIRUPDWLRQVXFKDVSDVVZRUGVRUEDQNDFFRXQWQXPEHUV
JDLQLQJXQDXWKRUL]HGDFFHVVWRDFRPSXWHULQRUGHUWRFRQQHFWWRWKH,QWHUQHWNQRZQDVD
“6RFNV”VHUYHURUSUR[\RU“SDVVZRUGKDUYHVWLQJ”ZKLFKLQYROYHVWKHXQDXWKRUL]HG
DFFHVVWRSDVVZRUGVVWRUHGRQDFRPSXWHU
$GLVWULEXWHGGHQLDORIVHUYLFHDWWDFNRU“''26DWWDFN”LVDW\SHRIPDOLFLRXV
FRPSXWHUDFWLYLW\ZKHUHDQDWWDFNHUFDXVHVDQHWZRUNRIFRPSURPLVHGFRPSXWHUVWR“IORRG”D
YLFWLPFRPSXWHUZLWKODUJHDPRXQWVRIGDWDRUVSHFLILHGFRPSXWHUFRPPDQGV$''26DWWDFN
W\SLFDOO\UHQGHUVWKHYLFWLPFRPSXWHUXQDEOHWRKDQGOHOHJLWLPDWHQHWZRUNWUDIILFDQGRIWHQWKH
YLFWLPFRPSXWHUZLOOEHXQDEOHWRSHUIRUPLWVLQWHQGHGIXQFWLRQ7KHJRDORIVXFKDQDWWDFNLVWR
GHQ\OHJLWLPDWHXVHUVWKHVHUYLFHVRIWKHFRPSXWHU'HSHQGLQJRQWKHW\SHDQGLQWHQVLW\RIWKH
''26DWWDFNWKHYLFWLPFRPSXWHUDQGLWVQHWZRUNPD\EHFRPHFRPSOHWHO\GLVDEOHGDQGUHTXLUH
VLJQLILFDQWUHSDLU
$“3267'DWD*UDEEHU”LVDVS\ZDUHWRROWKDWFDSWXUHVLQIRUPDWLRQHQWHUHGLQWR
,QWHUQHWEDVHGIRUPVE\DFRPSXWHUXVHU$3267'DWD*UDEEHULVFDSDEOHRIVWHDOLQJDZLGH
UDQJHRIVHQVLWLYHLQIRUPDWLRQLQFOXGLQJZHEVLWHORJLQFUHGHQWLDOV
“3DVVZRUGKDUYHVWLQJ”LVWKHSUDFWLFHRIJDWKHULQJDQGFROOHFWLQJRQOLQHORJLQ
FUHGHQWLDOVDQGFUHGLWFDUGQXPEHUV&ULPLQDOVJHQHUDOO\GRVRLQRUGHUWRVHOOWKHFUHGHQWLDOV
RIWHQLQEXON,QWHUQHWIRUXPVDUHXVHGE\FULPLQDOVDURXQGWKHZRUOGWRVHOODQGWUDGHFUHGHQWLDOV
EDVHGRQYDULRXVFKDUDFWHULVWLFV2QHVXEMHFWPD\VSHFLDOL]HLQIUDXGDVVRFLDWHGZLWKFUHGLWFDUG
LQIRUPDWLRQZKLOHDQRWKHUPD\SULPDULO\XVH,QWHUQHWEDQNLQJFUHGHQWLDOV&ULPLQDOVWUDGH
LOOLFLWO\JDWKHUHGLQIRUPDWLRQEDVHGRQWKHW\SHRIFUHGHQWLDOWKHEDQNRUHVWDEOLVKPHQW
DVVRFLDWHGZLWKWKHFUHGHQWLDOWKHFRXQWU\DVVRFLDWHGZLWKWKHFUHGHQWLDORUKRZUHFHQWO\WKH
Case 1:11-mj-00321-AK Document 1-1 Filed 05/12/11 Page 5 of 41
FUHGHQWLDOVZHUHVWROHQ&UHGHQWLDOVDUHSULFHGLQGLIIHUHQWWLHUVEDVHGRQVXFKFKDUDFWHULVWLFVDQG
VROGRUWUDGHGIRUSURILWLQFULPLQDO,QWHUQHWIRUXPV
$“GRPDLQ”LVDVHWRIVXEMHFWVDQGREMHFWVRQWKH,QWHUQHWZKLFKVKDUHFRPPRQ
VHFXULW\SROLFLHVSURFHGXUHVDQGUXOHVDQGDUHPDQDJHGE\WKHVDPHPDQDJHPHQWV\VWHP$
“GRPDLQQDPH”LGHQWLILHVZKHUHRQWKH:RUOG:LGH:HEWKHGRPDLQLVORFDWHG$“GRPDLQ
QDPHVHUYHU”RU“'16”WUDQVODWHVRUPDSVGRPDLQQDPHVWR,QWHUQHW3URWRFRO“,3”DGGUHVVHV
DQGYLFHYHUVD'RPDLQQDPHVHUYHUVPDLQWDLQFHQWUDOOLVWVRIGRPDLQQDPHV,3DGGUHVVHV
WUDQVODWHRUPDSWKHGRPDLQQDPHVLQDQ,QWHUQHWUHTXHVWDQGWKHQVHQGWKHUHTXHVWWRRWKHU
VHUYHUVRQWKH,QWHUQHWXQWLOWKHVSHFLILHGDGGUHVVLVIRXQG
“([H”LVVKRUWIRU“H[HFXWDEOH”RU“H[H”RUH[HFXWDEOHILOHDQGUHIHUVWRDELQDU\
ILOHFRQWDLQLQJDSURJUDPWKDWLVUHDG\WREHH[HFXWHGRUUXQE\DFRPSXWHU+DFNHUVPDQ\WLPHV
UHIHUWRWKHLUPDOLFLRXVSURJUDPVRUFRGHDV“H[H”RU“H[H”)RUH[DPSOH+DFNHUPD\DVN
+DFNHU“'LG\RXUH[HVSUHDGRYHUWKHQHWZRUN"”
$Q“H[SORLW”LVFRPSXWHUFRGHZULWWHQWRWDNHDGYDQWDJHRIDYXOQHUDELOLW\RU
VHFXULW\ZHDNQHVVLQDFRPSXWHUV\VWHPRUVRIWZDUH
$Q“,QWHUQHWSURWRFRODGGUHVV”RU“,3DGGUHVV”LVDXQLTXHQXPHULFDGGUHVVXVHG
E\FRPSXWHUVRQWKH,QWHUQHW$Q,3DGGUHVVLVGHVLJQDWHGE\DVHULHVRIIRXUQXPEHUVHDFKLQ
WKHUDQJHVHSDUDWHGE\SHULRGVHJ(YHU\FRPSXWHUFRQQHFWHGWRWKH
,QWHUQHWPXVWEHDVVLJQHGDQ,3DGGUHVVVRWKDW,QWHUQHWWUDIILFVHQWIURPDQGGLUHFWHGWRWKDW
FRPSXWHUPD\EHGLUHFWHGSURSHUO\IURPLWVVRXUFHWRLWVGHVWLQDWLRQ0RVW,QWHUQHW6HUYLFH
3URYLGHUVFRQWURODUDQJHRI,3DGGUHVVHVZKLFKWKH\DVVLJQWRWKHLUVXEVFULEHUV1RWZR
FRPSXWHUVGLUHFWO\FRQQHFWHGWRWKH,QWHUQHWFDQKDYHWKHVDPH,3DGGUHVVDWWKHVDPHWLPH
Case 1:11-mj-00321-AK Document 1-1 Filed 05/12/11 Page 6 of 41
7KXVDVDJHQHUDOPDWWHUDWDQ\JLYHQPRPHQWDQ,3DGGUHVVLVXQLTXHWRWKHFRPSXWHUWRZKLFK
LWKDVEHHQDVVLJQHG
,QWHUQHW5HOD\&KDW“,5&”LVDQHWZRUNRIFRPSXWHUVFRQQHFWHGWKURXJKWKH
,QWHUQHWWKDWDOORZVXVHUVWRFRPPXQLFDWHZLWKRWKHUVLQUHDOWLPHWH[WNQRZQDVFKDW,5&
XVHUVXWLOL]HVSHFLDOL]HGFOLHQWVRIWZDUHWRXVHWKHVHUYLFHDQGFDQDFFHVVD“FKDQQHO”ZKLFKLV
DGPLQLVWHUHGE\RQHRUPRUH“RSHUDWRUV”RU“RSV”,5&FKDQQHOVDUHVRPHWLPHVGHGLFDWHGWRD
WRSLFDQGDUHLGHQWLILHGE\DSRXQGVLJQDQGDGHVFULSWLRQRIWKHWRSLFVXFKDV“PLDPLGROSKLQV”
,5&FKDQQHOVDUHDOVRXVHGWRFRQWUROERWQHWVWKDWDUHXVHGWRODXQFK''26DWWDFNVVHQG
XQVROLFLWHGFRPPHUFLDOHPDLODQGJHQHUDWHDGYHUWLVLQJDIILOLDWHLQFRPH
,QWHUQHW5HOD\&KDW'DHPRQ“,5H'”LVDFRPSXWHUSURJUDPXVHGWRFUHDWHDQ
,5&VHUYHURQZKLFKSHRSOHFDQFKDWZLWKHDFKRWKHUYLDWKH,QWHUQHW
$“VHUYHU”RU“ER[”LVDFHQWUDOL]HGFRPSXWHUWKDWSURYLGHVVHUYLFHVIRURWKHU
FRPSXWHUVFRQQHFWHGWRLWYLDDQHWZRUN7KHRWKHUFRPSXWHUVDWWDFKHGWRDVHUYHUDUH
VRPHWLPHVFDOOHG“FOLHQWV”,QDODUJHFRPSDQ\LWLVFRPPRQIRULQGLYLGXDOHPSOR\HHVWRKDYH
FOLHQWFRPSXWHUVRQWKHLUGHVNWRSV:KHQWKHHPSOR\HHVDFFHVVWKHLUHPDLORUDFFHVVILOHV
VWRUHGRQWKHQHWZRUNLWVHOIWKRVHILOHVDUHSXOOHGHOHFWURQLFDOO\IURPWKHVHUYHUZKHUHWKH\DUH
VWRUHGDQGDUHVHQWWRWKHFOLHQW
VFRPSXWHUYLDWKHQHWZRUN,QODUJHUQHWZRUNVLWLVFRPPRQIRU
VHUYHUVWREHGHGLFDWHGWRDVLQJOHWDVN)RUH[DPSOHDVHUYHUWKDWLVFRQILJXUHGVRWKDWLWVVROH
WDVNLVWRVXSSRUWD:RUOG:LGH:HEVLWHLVNQRZQVLPSO\DVD“ZHEVHUYHU”6LPLODUO\DVHUYHU
WKDWRQO\VWRUHVDQGSURFHVVHVHPDLOLVNQRZQDVD“PDLOVHUYHU”
“6SDP”JHQHUDOO\LVDQHPDLOPHVVDJHWKDWLVVHQWLQEXONWRUHFLSLHQWVZLWKRXW
SULRUUHTXHVWRUDSSURYDO7KHRULJLQRIWKHVSDPLVDOPRVWDOZD\VPDVNHGRUIDOVLILHGWRSUHYHQW
DQ\LGHQWLILFDWLRQRIWKHVHQGHU
Case 1:11-mj-00321-AK Document 1-1 Filed 05/12/11 Page 7 of 41
“0DOZDUH”LVDQDEEUHYLDWHGWHUPIRU“PDOLFLRXVVRIWZDUH”0DOZDUHUHIHUVWR
VRIWZDUHSURJUDPVGHVLJQHGWRGDPDJHRUGRRWKHUXQZDQWHGDFWLRQVRQDFRPSXWHUV\VWHP
&RPPRQH[DPSOHVRIPDOZDUHLQFOXGHYLUXVHVZRUPVWURMDQKRUVHVDQGVS\ZDUH0DOZDUH
can gather data from a user’s system without the user knowing it.
&281721(
7LWOH8QLWHG6WDWHV&RGH6HFWLRQG
7KH5DFNHWHHULQJ&RQVSLUDF\
3DUDJUDSKVDUHKHUE\LQFRUSRUDWHGDQGUHDOOHJHGKHUHLQ
)URPRQRUDERXW6HSWHPEHUDQGFRQWLQXLQJXSWRLQRUDERXW-XO\
LQWKH'LVWULFWRI&ROXPELDDQGHOVHZKHUHLQFOXGLQJ6SDLQDQG6ORYHQLDWKHGHIHQGDQWV
0$7-$=6.25-$1&DND“LVHUGR”DND“VHUGR”)/25(1&,2&$55258,=DND
“1H7.”DND“1HWNDLUR”DQG0(1725/(1,4,DND“,FHPDQ”WRJHWKHUZLWKRWKHUSHUVRQV
NQRZQDQGXQNQRZQEHLQJSHUVRQVDVVRFLDWHGZLWKDFULPLQDOHQWHUSULVHFRQWUROOHGWKURXJKDQ
LQYLWDWLRQRQO\RQOLQHIRUXPNQRZQDV“'DUNRGH”ZKLFKHQJDJHGLQDQGWKHDFWLYLWLHVRIZKLFK
DIIHFWHGLQWHUVWDWHDQGIRUHLJQFRPPHUFHNQRZLQJO\DQGLQWHQWLRQDOO\FRQVSLUHGWRYLRODWH
86&FWKDWLVWRFRQGXFWDQGSDUWLFLSDWHGLUHFWO\DQGLQGLUHFWO\LQWKHFRQGXFWRIWKH
DIIDLUVRIWKDWHQWHUSULVHWKURXJKDSDWWHUQRIUDFNHWHHULQJDFWLYLW\LQYROYLQJPXOWLSOHDFWV
LQGLFWDEOHXQGHU
D
86&H[WRUWLRQ
E
86&ZLUHIUDXG
F
86&EDQNIUDXGDQG
G
86&DDFFHVVGHYLFHIUDXG
Case 1:11-mj-00321-AK Document 1-1 Filed 05/12/11 Page 8 of 41
,WZDVDIXUWKHUSDUWRIWKHFRQVSLUDF\WKDWHDFKGHIHQGDQWDJUHHGWKDWD
FRQVSLUDWRUZRXOGFRPPLWDWOHDVWWZRDFWVRIUDFNHWHHULQJDFWLYLW\LQWKHFRQGXFWRIWKHDIIDLUV
RIWKHHQWHUSULVH
7+((17(535,6(
0$7-$=6.25-$1&DND“LVHUGR”DND“VHUGR”)/25(1&,2&$552
58,=DND“1H7.”DND“1HWNDLUR”DQG0(1725/(1,4,DND“,FHPDQZHUHPHPEHUV
DQGDVVRFLDWHVRIDFULPLQDOHQWHUSULVH7KLVFULPLQDOHQWHUSULVHFRQVWLWXWHGDQ“(QWHUSULVH”DV
WKDWWHUPLVGHILQHGLQ7LWOH8QLWHG6WDWHV&RGH6HFWLRQWKDWLVDJURXSRI
LQGLYLGXDOVDVVRFLDWHGLQIDFW7KHHQWHUSULVHFRQVWLWXWHGDQRQJRLQJRUJDQL]DWLRQZKRVH
PHPEHUVIXQFWLRQHGDVDFRQWLQXLQJXQLWIRUDFRPPRQSXUSRVHRIDFKLHYLQJWKHREMHFWLYHVRI
WKH(QWHUSULVH7KHHQWHUSULVHZDVHQJDJHGLQDQGLWVDFWLYLWLHVDIIHFWHGLQWHUVWDWHDQGIRUHLJQ
FRPPHUFH
7KH(QWHUSULVHZKLFKRSHUDWHGLQWKH'LVWULFWRI&ROXPELDDQGHOVHZKHUHLQWKH
8QLWHG6WDWHVDQGLQWKHFRXQWULHVRI6ORYHQLDDQG6SDLQDQGHOVHZKHUHRSHUDWHGWKURXJK
JURXSVRILQGLYLGXDOVUHVSRQVLEOHIRUWKHYDULRXVIUDXGXOHQWVFKHPHVDQGFULPLQDODFWLYLWLHV
FRQGXFWHGE\WKH(QWHUSULVH:KLOHWKHRYHUDOOVWUXFWXUHDQGPRGHORIWKH(QWHUSULVHUHPDLQHG
FRnstant, the groups’ and members’ responsibilities within the overall structure of the Enterprise
ZHUHLQDVWDWHRIIOX[WRDGMXVWIRUWKHVSHFLILFQHHGVRIWKHVSHFLILFFULPLQDODFWLYLW\RIWKH
(QWHUSULVH,QSDUWLFXODUWKHGHIHQGDQWDQGRWKHUVRUJDQL]HGDIRUXPNQRZQDV“'DUNRGH”WR
IDFLOLWDWHWKHH[FKDQJHRILGHDVNQRZOHGJHDQGDGYLFHDQGWRSURYLGHDWLJKWO\FRQWUROOHG
PDUNHWSODFHIRUEX\HUVDQGVHOOHUVHQJDJHGLQFULPLQDODFWLYLW\
Case 1:11-mj-00321-AK Document 1-1 Filed 05/12/11 Page 9 of 41
Darkode’s home page is located at KWWSGDUNRGHFRP8QWLOUHFHQWO\'DUNRGH
SURPRWHGLWVHOIDVWKH“%HVW0DOZDUH0DUNHWSODFHRQWKH1HW”,WLVFRPSULVHGSULPDULO\RI
XVHUVLQWHUHVWHGLQWKHXVHVDOHDQGGHSOR\PHQWRIPDOZDUHIRUWKHSXUSRVHRIJHQHUDWLQJ
UHYHQXH,WLVUXQE\DQDGPLQLVWUDWRUZKRIURPDWOHDVWXQWLODSSUR[LPDWHO\0DUFK
ZDV6.25-$1&0HPEHUVRI'DUNRGHDUHFDUHIXOO\YHWWHGWKURXJKDWZRVWHSSURFHVV)LUVWD
SURVSHFWLYHPHPEHUPXVWEHLQYLWHGWRWKHIRUXPE\DQH[LVWLQJPHPEHU1H[WWKHSURVSHFWLYH
PHPEHUPXVWSRVWDQLQWURGXFWLRQRQWKH'DUNRGHIRUXPZKLFKW\SLFDOO\LQFOXGHVWKHW\SHVRI
FULPLQDODFWLYLW\LQZKLFKWKHQHZXVHULVVHHNLQJWRHQJDJH2QO\LIH[LVWLQJPHPEHUVYRXFKIRU
WKHQHZPHPEHULVWKHQHZPHPEHUDOORZHGIXOODFFHVVWRWKH'DUNRGHIRUXP
385326(2)7+((17(535,6(
7KHSULQFLSDOSXUSRVHRIWKH(QWHUSULVHZDVWRJHQHUDWHPRQH\IRULWVPHPEHUV
DQGDVVRFLDWHV7KLVSXUSRVHZDVLPSOHPHQWHGE\PHPEHUVDQGDVVRFLDWHVWKH(QWHUSULVH
WKURXJKWKHFRPPLVVLRQRIYDULRXVFULPLQDODFWVLQFOXGLQJZLUHIUDXGEDQNIUDXGDFFHVVGHYLFH
IUDXGH[WRUWLRQDQGPRQH\ODXQGHULQJ,LQFRUSRUDWHDQGUHDOOHJHSDUDJUDSKVKHUHLQ
7KHPHPEHUVDQGDVVRFLDWHVRIWKH(QWHUSULVHVRXJKWDPRQJRWKHUWKLQJVWR
D
3UHVHUYHDQGSURWHFWWKHDELOLW\RIWKH(QWHUSULVHWRHQULFKLWVPHPEHUVDQG
DVVRFLDWHVWKURXJKWKHFRUUXSWXVHRIIDOVHDQGILFWLWLRXVLGHQWLWLHVDQGHQWLWLHVWRKLQGHUGHWHFWLRQ
E\ODZHQIRUFHPHQWDQG
E
3URPRWHDQGHQKDQFHWKHFULPLQDODFWLYLWLHVRIWKH(QWHUSULVHDQGLWV
PHPEHUVDQGDVVRFLDWHV
Case 1:11-mj-00321-AK Document 1-1 Filed 05/12/11 Page 10 of 41
7KH(QWHUSULVHwas bound together by, among other things, the members’ and associates’
FRPPRQLQWHUHVWNQRZOHGJHDQGXVDJHRIWKH,QWHUQHWDQGLWVYXOQHUDELOLWLHVWRIUDXGXOHQWO\
REWDLQPRQH\IURPYLFWLPVSXUVXDQWWRYDULRXVIUDXGXOHQWVFKHPHVLQFOXGLQJEXWQRWOLPLWHGWR
VFKHPHVWRVWHDOEDQNLQIRUPDWLRQXVLQJPDOLFLRXVSURJUDPVWRH[WRUWZHEVLWHRZQHUVWKURXJK
''26DWWDFNVDQGWRVHOODFFHVVWRFRPSURPLVHGFRPSXWHUVWRRWKHUIRUXPPHPEHUVVHHNLQJWR
LQVWDOOWKHLURZQPDOLFLRXVSURJUDPV
&28177:2
&RQVSLUDF\
7LWOH8QLWHG6WDWHV&RGH6HFWLRQ
)URPLQRUDERXW6HSWHPEHUDQGFRQWLQXLQJXSWRLQRUDERXW-XO\
LQWKH'LVWULFWRI&ROXPELDDQGHOVHZKHUHLQFOXGLQJ6SDLQDQG6ORYHQLDLQFRUSRUDWLQJDQGUH
DOOHJLQJSDUDJUDSKVDQGKHUHLQWKHGHIHQGDQWV0$7-$=6.25-$1&DND
“LVHUGR”DND“VHUGR”)/25(1&,2&$55258,=DND“1H7.”0(1725/(1,4,DND
“,FHPDQ”DQGRWKHUVNQRZQDQGXQNQRZQGLGNQRZLQJO\DQGZLOOIXOO\FRQVSLUHFRPELQH
FRQIHGHUDWHDQGDJUHHDPRQJHDFKRWKHUDQGZLWKRWKHUSHUVRQVWR
D
GHYLVHDVFKHPHDQGDUWLILFHWRGHIUDXGDQGWRREWDLQPRQH\DQGSURSHUW\
IURPLQGLYLGXDOVDQGFRUSRUDWLRQVE\PHDQVRIIDOVHDQGIUDXGXOHQWSUHWHQVHVUHSUHVHQWDWLRQV
DQGSURPLVHVXVLQJZLUHFRPPXQLFDWLRQVLQLQWHUVWDWHDQGIRUHLJQFRPPHUFHLQYLRODWLRQRI
7LWOH8QLWHG6WDWHV&RGH6HFWLRQVDQG
E
H[HFXWHDVFKHPHDQGDUWLILFHWRGHIUDXGDILQDQFLDOLQVWLWXWLRQRUWRREWDLQ
DQ\RIWKHPRQH\VIXQGVFUHGLWDVVHWVVHFXULWLHVRURWKHUSURSHUW\RZQHGE\RUXQGHUWKH
Case 1:11-mj-00321-AK Document 1-1 Filed 05/12/11 Page 11 of 41
FXVWRG\RUFRQWURORIDILQDQFLDOLQVWLWXWLRQE\PHDQVRIIDOVHDQGIUDXGXOHQWSUHWHQVHV
UHSUHVHQWDWLRQVDQGSURPLVHVLQYLRODWLRQRI7LWOH8QLWHG6WDWHV&RGH6HFWLRQV
&28177+5((
&RQVSLUDF\
7LWOH8QLWHG6WDWHV&RGH6HFWLRQ
)URPRQRUDERXW6HSWHPEHUDQGFRQWLQXLQJXSWRLQRUDERXW-XO\
LQWKH'LVWULFWRI&ROXPELDDQGHOVHZKHUHLQFOXGLQJ6SDLQDQG6ORYHQLDLQFRUSRUDWLQJDQGUH
DOOHJLQJSDUDJUDSKVDQGKHUHLQWKHGHIHQGDQWV0$7-$=6.25-$1&DND
“LVHUGR”DND“VHUGR”)/25(1&,2&$55258,=DND“1H7.”0(1725/(1,4,DND
“,FHPDQ”DQGRWKHUVNQRZQDQGXQNQRZQGLGNQRZLQJO\DQGZLOOIXOO\FRQVSLUHFRPELQH
FRQIHGHUDWHDQGDJUHHDPRQJHDFKRWKHUDQGZLWKRWKHUSHUVRQVWR
D
NQRZLQJO\FDXVHWKHWUDQVPLVVLRQRIDSURJUDPLQIRUPDWLRQFRGHDQG
FRPPDQGDQGDVDUHVXOWRIVXFKFRQGXFWLQWHQWLRQDOO\FDXVHGDPDJHZLWKRXWDXWKRUL]DWLRQWRD
SURWHFWHGFRPSXWHULQYLRODWLRQRI7LWOH8QLWHG6WDWHV&RGH6HFWLRQDD
E
NQRZLQJO\DQGZLWKLQWHQWWRGHIUDXGSRVVHVVILIWHHQRUPRUHXQDXWKRUL]HG
DFFHVVGHYLFHVLQYLRODWLRQRI7LWOH8QLWHG6WDWHV&RGH6HFWLRQDDQG
F
GLGNQRZLQJO\DQGLQWHQWLRQDOO\REVWUXFWGHOD\DQGDIIHFWDQGDWWHPSWWR
REVWUXFWGHOD\DQGDIIHFWFRPPHUFHDVWKDWWHUPLVGHILQHGLQ86&DQGWKH
PRYHPHQWRIDUWLFOHVDQGFRPPRGLWLHVLQVXFKFRPPHUFHE\H[WRUWLRQDVWKDWWHUPLVGHILQHGLQ
86&LQYLRODWLRQRI7LWOH8QLWHG6WDWHV&RGH6HFWLRQ
Case 1:11-mj-00321-AK Document 1-1 Filed 05/12/11 Page 12 of 41
&2817)285
'DPDJHWR3URWHFWHG&RPSXWHU
7LWOH8QLWHG6WDWHV&RGH6HFWLRQDD
)URPRQRUDERXW6HSWHPEHUDQGFRQWLQXLQJXSWRLQRUDERXW-XO\
LQWKH'LVWULFWRI&ROXPELDDQGHOVHZKHUHLQFOXGLQJ6SDLQDQG6ORYHQLDLQFRUSRUDWLQJDQGUH
DOOHJLQJSDUDJUDSKVDQGKHUHLQWKHGHIHQGDQWV0$7-$=6.25-$1&DND
“LVHUGR”DND“VHUGR”)/25(1&,2&$55258,=DND“1HW.”0(1725/(1,4,DND
“,FHPDQ”DQGRWKHUVNQRZQDQGXQNQRZQNQRZLQJO\FDXVHGWKHWUDQVPLVVLRQRIDSURJUDP
LQIRUPDWLRQFRGHDQGFRPPDQGDQGDVDUHVXOWRIVXFKFRQGXFWLQWHQWLRQDOO\FDXVHGGDPDJH
ZLWKRXWDXWKRUL]DWLRQWRDSURWHFWHGFRPSXWHU
7+(%877(5)/<%27$1'0$7-$=6.25-$1&
6.25-$1&ILUVWFDPHWRWKH)%,
VDWWHQWLRQLQRUDERXW2FWREHU
8VHUQDPHGD5VWDWHGWKDWKHNQHZDQLQGLYLGXDOE\WKHXVHUQDPHLVHUGR#JPDLOFRPWKDW
FRXOGGHYHORSERWV,QDSSUR[LPDWHO\2FWREHUDOOGDWHVKHUHLQDUHDSSUR[LPDWH$JHQWV
FRQGXFWHGVHDUFKHVRQSXEOLFO\DFFHVVLEOH,QWHUQHWVLWHVIRULQIRUPDWLRQDERXW
“LVHUGR#JPDLOFRP”DQGGLVFRYHUHGWKDWLVHUGR#JPDLOFRPLVNQRZQE\WKHVFUHHQPRQLNHU
LVHUGR,WZDVOHDUQHGWKDWLVHUGRFRPPXQLFDWHVYLDHPDLORU*RRJOH7DONZLWKKLV*PDLO
DFFRXQWLVHUGR#JPDLOFRP$SRVWLQJGDWHG2FWREHUE\“LVHUGR”RQZZZXQNE]
DGYHUWLVHGIRUVDOHWKH%)%27ERWVRIWZDUH7KHSRVWLQJOLVWHGWKHFRQWDFWSHUVRQDV
“LVHUGR#JPDLOFRP”GHVFULEHGWKHFDSDELOLWLHVRIWKH%)%27VRIWZDUHDQGOLVWHGWKHEDVLF
Case 1:11-mj-00321-AK Document 1-1 Filed 05/12/11 Page 13 of 41
SULFHDV(XURVLISD\PHQWZDVPDGHE\:HVWHUQ8QLRQRU“PRQH\EURNHUV”7KHSRVWLQJ
OLVWHGWKHRYHUDOOGHVFULSWLRQDQGSXUSRVHRIWKH%)%27DVIROORZV
%RWGHVLJQHGWRVWHDOWK\UXQRQZLQQWEDVHGV\VWHPVZLQNWR
ZLQYLVWDDQGWRVWHDOWK\DQGHIILFLHQWO\VSUHDGYLDDERYH
PHQWLRQHGPHWKRGVZKLFKZHUHVSHFLDOO\GHVLJQHGDQGLPSURYHG
FRPSDUHGWRDOUHDG\NQRZQSXEOLFPHWKRGV7KHERWVSXUSRVHLV
QRWDWWDFNLQJSKLVKLQJVWHDOLQJSHUVRQLQIRRUVHUYLQDVVRFNV
VHUYHU$OOWKHVHIHDWXUHVFDQEHDGGHGIRUDGGLWLRQDOSULFHRU
XSORDGHGDQGH[HFXWHGRQERWDVLWVXSSRUWVGRZQORDGFRPPDQG
%HJLQQLQJLQ2FWREHUWKHLQGLYLGXDODFWLQJXQGHUFRYHURQEHKDOIRI
WKH)%,DFRQILGHQWLDOKXPDQVRXUFHKHUHLQDIWHU&+6LQLWLDWHGFRQWDFWZLWK6.25-$1&E\
FRQWDFWLQJKLPYLD*RRJOH7DONDQGHPDLOWKURXJKWKHDFFRXQW“LVHUGR#JPDLOFRP”DERXWWKH
%)%27,QWKRVHLQLWLDO*RRJOH7DONDQGHPDLOFRPPXQLFDWLRQVWKH&+6LQTXLUHGDERXWWKH
SXUFKDVHRIWKH%)%27IURP6.25-$1&
)URPWRDWWKHUHTXHVWRIWKH)%,WKH&+6KDGPXOWLSOHRQOLQH
FRQYHUVDWLRQVZLWK6.25-$1&LQZKLFKWKH\GLVFXVVHGWKHIHDWXUHVRIWKH%)%27DQGDQRWKHU
IRUPRIERWQHWVRIWZDUHNQRZQDV%XWWHU)O\)ORRGHURU“%))”%))ZDVGHVFULEHGDV
SKORJANC’sQHZHVWSURGXFWWKDWZDVPRGXODULQQDWXUHDOORZLQJFXVWRPHUVWRSLFNDQG
FKRRVHWKHVSHFLILFFDSDELOLWLHVRIWKHERWQHWVRIWZDUHWKH\GHVLUHG7KH&+6DOVRKHOSHGWR
DUUDQJH)%,XQGHUFRYHUSXUFKDVHVRIWKH%)%27DQG%))PDOZDUHIURP6.25-$1&7KH
&+6OHDUQHGIURP6.25-$1&WKDWWKH%)%27VRIWZDUHLQFOXGHGWKHDELOLW\WRVSUHDGWRYLFWLP
FRPSXWHUVYLD8QLYHUVDO6HULDO%XV86%DSRUWXVHGWRFRQQHFWH[WHUQDOGHYLFHVVXFKDV
SULQWHUVDQGSRUWDEOHVWRUDJHGHYLFHVWRDSHUVRQDOFRPSXWHU0LFURVRIW,QVWDQW0HVVHQJHU
061VRIWZDUHWKDWSHUPLWVXVHUVWRFKDWLQUHDOWLPHZLWKRWKHU061XVHUVDQG3HHUWR3HHU
33VRIWZDUHGHVLJQHGWRIDFLOLWDWHWKHWUDQVIHURIGDWDEHWZHHQFRPSXWHUVFRPPRQO\XVHGWR
Case 1:11-mj-00321-AK Document 1-1 Filed 05/12/11 Page 14 of 41
WUDGHPXVLFDQGYLGHRILOHV$FFRUGLQJWR6.25-$1&WKH%)%27LVDEOHWRLQIHFWDQ\YHUVLRQ
RI0LFURVRIW,QVWDQW0HVVHQJHU061DQGLVFDSDEOHRIDOWHULQJWKHWH[WHQWHUHGLQWR061
%)%27UHSODFHVWKHWH[WHQWHUHGE\WKHXVHUZLWKDOLQNWRDZHEVLWHWKDWZKHQFOLFNHGUHVXOWV
LQWKHGRZQORDGRIPDOZDUHWRWKHUHFHLYLQJV\VWHP6.25-$1&IXUWKHUVWDWHGWKDWWKH%)%27
ZDVXQGHWHFWDEOHDWQRYLUXVWKDQNVRUJDZHEVLWHWKDWSHUPLWVWKHSXEOLFWRVFDQDJLYHQILOHZLWK
DQXPEHURIGLIIHUHQWDQWLYLUXVSURGXFWV&HUWDLQYHUVLRQVRISKORJANC’S VRIWZDUHKDG''26
IXQFWLRQDOLW\
,Qlate 2009, the FBI obtained the contents of SKORJANC’s email account,
LVHUGR#JPDLOFRPYLDDIHGHUDOVHDUFKZDUUDQW7KHPHDQVE\ZKLFKWKH%)%27ZDVFDSDEOH
RIVSUHDGLQJLWVHOIWRRWKHUXQLQIHFWHGFRPSXWHUVZHUHGHWDLOHGLQDQHPDLO6.25-$1&WR
DGPLQ#FUHZLQIR7KHHPDLOVWDWHGWKDWWKH86%061DQG33LQIHFWLRQPHWKRGVZHUH
DYDLODEOHLQYDULRXVYHUVLRQVRI%)%27LQFOXGLQJ%)%27/,7((85%)%27/,7(
$77$&.(5(85%)%2767$1'$5'(85DQG%)%2767$1'$5'
$77$&.(5(85
$GGLWLRQDOIHDWXUHVRIWKH%)%27ZHUHGHVFULEHGLQDQHPDLOVHQWE\
6.25-$1&WRZJIDWDO#JPDLOFRPRQ'HFHPEHU,QWKHHPDLO6.25-$1&LQGLFDWHV
WKDWWKHVRIWZDUHLQFOXGHV''26IHDWXUHVDVZHOODVWKHFDSDELOLW\WRVWHDOVHQVLWLYHLQIRUPDWLRQ
LQFOXGLQJXVHUQDPHVDQGSDVVZRUGVIURPXVHUVRIWKH)LUHIR[DQG,QWHUQHW([SORUHUZHE
EURZVHUV
6.25-$1&DOVRDXWKRUHGDQGDGYHUWLVHGRWKHUVRIWZDUHVXFKDV'&,%RW
'RZQ7URMDQG$VSHUJLOOXV,QDQHPDLOGDWHG'HFHPEHU6.25-$1&HPDLOHG
JRYKDFN#JPDLOFRPZLWKDOLVWRI'RZQ7URMIHDWXUHVLQFOXGLQJWKHDELOLW\WRUHPRWHO\ORJ
NH\VWURNHVUHPRWHO\UHERRWRUVKXWGRZQDV\VWHPXSORDGDQGGRZQORDGILOHVRULQVWDOOLQWRD
Case 1:11-mj-00321-AK Document 1-1 Filed 05/12/11 Page 15 of 41
ORFDWLRQWKDWLVLPSRVVLEOHWRDFFHVVZLWK:LQGRZV([SORUHU6.25-$1&DOVRVWDWHGWKDW
'RZQ7URMLQFOXGHG“PRUHYLFWLPVDWWKHVDPHWLPH”
6.25-$1&DGYHUWLVHGKLVPDOZDUHRQYDULRXVZHEVLWHVVXFKDV
KWWSZZZXQNE]KWWSGDUNRGHFRPDQGKWWSZZZEIV\VWHPVQHW6.25-$1&DFWLYHO\
VRXJKWQHZRSSRUWXQLWLHVWRDGYHUWLVHKLVPDOZDUH)RUH[DPSOHLQHPDLOFRUUHVSRQGHQFH
EHWZHHQ6.25-$1&DQGDGPLQ#FUHZLQIRRQ)HEUXDU\DQG6.25-$1&
REWDLQHGDFFHVVIURPDGPLQ#FUHZLQIRWRD*HUPDQXQGHUJURXQGIRUXPORFDWHGDW
FUHZWRVPIVRWKDW6.25-$1&FRXOGPDUNHW%)%27WR*HUPDQVSHDNLQJEX\HUV
2Q-XO\LQ0DULERU6ORYHQLDDFRQIHGHUDWHRI6.25-$1&SRVLWLYHO\
LGHQWLILHGWKHXVHURIWKHHPDLODGGUHVVLVHUGR#JPDLOFRPDV0$7-$=6.25-$1&7KLV
XQFKDUJHGFRFRQVSLUDWRUDQG6.25-$1&DUHXQLYHUVLW\FODVVPDWHV6.25-$1&HQOLVWHGWKH
XQFKDUJHGFRconspirator’s DVVLVWDQFHLQXSGDWLQJWKHSURJUDPPLQJFRGHIRUWKHH[LVWLQJ
%)%27*UDSKLFDO8VHU,QWHUIDFH*8,7KHXQFKDUJHGFRFRQVSLUDWRUDOVRDVVLVWHG
6.25-$1&LQFUHDWLQJDZHEVLWHUHODWHGWRWKH%)%277KHXQFKDUJHGFRFRQVSLUDWRUXVHG
HPDLODGGUHVVMHUQHMB#KRWPDLOFRPWRFRPPXQLFDWHZLWK6.25-$1&ZKRXVHG
LVHUGR#JPDLOFRPZKHUHWKH\GLVFXVVHGGHYHORSPHQWRIWKH%)%27*8,$JHQWVDOVR
VKRZHGWKHXQFKDUJHGFRFRQVSLUDWRUDSKRWRJUDSKRI0$7-$=6.25-$1&DND“LVHUGR”
DND“VHUGR”7KHXQFKDUJHGFRFRQVSLUDWRULGHQWLILHGWKHSHUVRQLQWKHSKRWRJUDSKDVLVHUGR
2Q)HEUXDU\DQHPDLOZDVVHQWIURPLVHUGR#JPDLOFRPWR
LVHUGR#JPDLOFRPWKDWLQFOXGHGDQDWWDFKPHQWQDPHG“LPDJHVUDU”WKDWFRQWDLQHGILIW\
VFUHHQVKRWVRIZKDWDSSHDUVWREHDVFKRROH[DP$WWKHWRSRIHDFKLPDJHWKHQDPHRIWKHWHVW
WDNHU“6NRUMDQF0DWMD]”DSSHDUV
Case 1:11-mj-00321-AK Document 1-1 Filed 05/12/11 Page 16 of 41
$QDO\VLVRISKORJANC’sHPDLODFFRXQWVKRZHGWKDW6.25-$1&IROORZHGD
SDWWHUQRIVHOOLQJFXVWRPL]HGYHUVLRQVRI%)%27WRLQGLYLGXDOVDURXQGWKHZRUOG0DQ\RIWKH
EX\HUVUHTXHVWHGFXVWRPL]HGIHDWXUHVWREHLQFOXGHGLQWKHLUYHUVLRQRIWKH%)%27$IWHU
FRRUGLQDWLQJWKHVSHFLILFUHTXLUHPHQWVIRUWKH%)%27ZLWK6.25-$1&WKHEX\HUVRIWHQVHQW
SD\PHQWYLD/LEHUW\5HVHUYHRU:HVWHUQ8QLRQ6.25-$1&LQVWUXFWHGWKDWSD\PHQWVEHVHQWWR
DQXQFKDUJHGFRFRQVSLUDWRUZKRUHVLGHGDWKLVDGGUHVVNQRZQKHUHDIWHUDV“1&”2QHRIWKH
VSHFLILFUHTXLUHPHQWVIRUSXUFKDVLQJWKH%)%27ZDVWRSURYLGH6.25-$1&ZLWKDOLVWRI
GRPDLQQDPHVDQGXSGDWHFRGHV7KHGRPDLQQDPHVDQGFRGHVZHUHWKHQSURJUDPPHGE\
6.25-$1&into the customer’s speciILFYHUVLRQRIWKH%)%272QFH6.25-$1&UHFHLYHG
WKHSD\PHQWGRPDLQQDPHVDQGFRGHV6.25-$1&VHQWDSDVVZRUGSURWHFWHGILOHXVXDOO\
QDPHGVRPHWKLQJVLPLODUWREIERWUDURUERDWUDUWRWKHEX\HUDQGWKHQDGYLVHGWKHEX\HUWRFKDW
ZLWKKLPRQ0610HVVHQJHUWRREWDLQWKHSDVVZRUGWRWKHUDUILOH
$QDO\VLVRIWKHLVHUGR#JPDLOFRPHPDLODFFRXQWUHYHDOHGPXOWLSOHLQVWDQFHVRI
6.25-$1&GLUHFWLQJ%)%27EX\HUVWRVHQG:HVWHUQ8QLRQSD\PHQWVWR1&LQWKHFLW\RI
0DULERU6ORYHQLD)RUH[DPSOHLQDQHPDLOGDWHG-XO\ZKLFKFRQWDLQHGDFKDWORJ
WUDQVFULSWVFKOLVW#JPDLOFRP6FKOLVWDQG6.25-$1&GLVFXVVHGSD\PHQWIRU%)%27
6.25-$1&VWDWHGWR6FKOLVWWKDWKHZRXOGUHFHLYHWKH%)%27DVVRRQDVSRVVLEOHDIWHUVHQGLQJ
WKHPRQH\DQGWKDWWKH:HVWHUQ8QLRQSD\PHQWVKRXOGEHPDGHWR1&LQ0$5,%25
6/29(1,$
5HFRUGVREWDLQHGIURP:HVWHUQ8QLRQVKRZWKDWRQRUDERXW-XO\D
:HVWHUQ8QLRQSD\PHQWZDVVHQWIURPDQXQFKDUJHGFRFRQVSLUDWRULQ5RPDQLDWR1&LQWKH
DPRXQWRI(XUR2QWKHVDPHGDWH6FKOLVWVHQWLVHUGR#JPDLOFRPDOLVWRIGRPDLQVDQG
FRGHVIRUKLVYHUVLRQRI%)%27
Case 1:11-mj-00321-AK Document 1-1 Filed 05/12/11 Page 17 of 41
,Q$XJXVWDQG6HSWHPEHURI6.25-$1&DQG6FKOLVWDJDLQFRPPXQLFDWHG
YLDHPDLOZLWK6FKOLVWSURYLGLQJWKHGRPDLQQDPHVKQR[RUJVRFNVDFRPURQSFQHWDQGRWKHU
FRQILJXUDWLRQLQIRUPDWLRQIRU“EIERWSUR””EIERW”6FKOLVWUHTXHVWHGWKDW6.25-$1&LQFOXGH
WKHWKUHHGRPDLQVZLWKLQKLVFXVWRPL]HGYHUVLRQRI%)%276FKOLVWFRPSOHPHQWHG6.25-$1&
RQWKHVWDELOLW\DQGVSHHGRIWKH%)%27DQGVWDWHGWKDW%)%27ZDVZHOOZRUWKWKHPRQH\
2Q0D\DQG6HSWHPEHUZDLVWHGWLPH#KRWPDLOFRP
FRUUHVSRQGHGYLDHPDLOZLWK6.25-$1&7KHVXEMHFWRIWKHVHHPDLOVZDV“0\%)%273UR
/LWH&RQILJ”DQG“QHZDQGROGGQV”:DLVWHGWLPH#KRWPDLOFRPSURYLGHG6.25-$1&ZLWK
GRPDLQQDPHVDQGFRGHV$:HVWHUQ8QLRQSD\PHQWPDGHE\WKHXQFKDUJHGFRFRQVSLUDWRU
ZKRRZQVZDLVWHGWLPH#KRWPDLOFRPWR1&RQ0D\FRUUHVSRQGVWRWKHHPDLO
FRPPXQLFDWLRQRI0D\LQZKLFKWKHXQFKDUJHGFRFRQVSLUDWRUSURYLGHG6.25-$1&
ZLWKGRPDLQQDPHV
7KHRZQHURIWKHHPDLODGGUHVVZDLVWHGWLPH#KRWPDLOFRPZDVLQWHUYLHZHGE\
WKH)%,DQGVWDWHGWKDWKHSXUFKDVHG%)%27IURPLVHUGRDQGWKDWKHZDVLQYROYHGLQSURFXULQJ
“LQVWDOOV”
7KHUHZHUHDWOHDVWWZHQW\RWKHULQGLYLGXDOVWKDWVHQWPRQH\WR1&ZKRDOVR
FRPPXQLFDWHGYLDHPDLOZLWK6.25-$1&6RPHRIWKHVHHPDLOFRQYHUVDWLRQVLQFOXGHGWKH
FXVWRPHUSURYLGLQJ6.25-$1&ZLWKILUVWDQGODVWQDPHV:HVWHUQ8QLRQWUDQVDFWLRQQXPEHUV
SD\PHQWDPRXQWVPDWFKLQJPRQH\VHQWWR1&%)%27GRPDLQQDPHVDQGXSGDWHFRGHV7KH
FRQYHUVDWLRQVIROORZHGDVLPLODUSDWWHUQUHODWLQJWRWKHSXUFKDVHRIWKH%)%27
:HVWHUQ8QLRQUHFRUGVUHYHDOWKDWDWOHDVW:HVWHUQ8QLRQSD\PHQWVZHUHVHQW
WR1&IURPLQGLYLGXDOVLQDWOHDVWGLIIHUHQWFRXQWULHV
Case 1:11-mj-00321-AK Document 1-1 Filed 05/12/11 Page 18 of 41
7+(0$5,326$%271(7
,Q0D\DIDVWVSUHDGLQJERWQHWZDVREVHUYHGE\WKH,7VHFXULW\FRPSDQ\
'HIHQFH,QWHOOLJHQFH,QF'HIHQFH,QWHOOLJHQFHQDPHGWKLVERWQHW“0DULSRVD”WKH6SDQLVKZRUG
IRUEXWWHUIO\%DVHGXSRQWKHIDFWVVHWIRUWKEHORZDQGRWKHULQIRUPDWLRQLWKDVEHHQGHWHUPLQHG
WKDWWKH0DULSRVDERWLVDFXVWRPL]HGYHUVLRQRI%XWWHUIO\%RW%)%27ZULWWHQE\6.25-$1&
DQGGHSOR\HGE\58,=,QGXVWU\UHSRUWVLQGLFDWHWKDWWKH0DULSRVDERWLQIHFWHGDWOHDVW
PLOOLRQFRPSXWHUVZRUOGZLGHDQGUDQNLWRQHRIWKHODUJHVWERWQHWVHYHUFUHDWHG
%HWZHHQ2FWREHUDQG0D\5XL]XVLQJWKHHPDLODGGUHVV
QHWNDLUR#KRWPDLOFRPFRPPXQLFDWHGZLWK6.25-$1&DWLVHUGR#JPDLOFRPUHJDUGLQJ
SXUFKDVHGHOLYHU\DQGFRQILJXUDWLRQRI%)%272Q2FWREHU6.25-$1&VHQWDQ
HPDLOWR58,=UHTXHVWLQJFRQILJXUDWLRQLQIRUPDWLRQIRU%)%27%HWZHHQ2FWREHUDQG
'HFHPEHU6.25-$1&VHQWWKUHHHPDLOVWR58,=7KHVHHPDLOVFRQWDLQHG
DWWDFKPHQWVQDPHGDVIROORZVEIEYUDUEIYUDUEIQHWNDLURUDU7KHVHDWWDFKPHQWVZHUH
QDPHGFRQVLVWHQWO\ZLWKGLIIHUHQWYHUVLRQVRI%)%27%HWZHHQ)HEUXDU\DQG0D\
58,=VHQWWKUHHHPDLOVWR6.25-$1&VSHFLI\LQJGRPDLQQDPHVHUYHUVWREHLQFRUSRUDWHG
into RUIZ’s customized version of BFBOT
2Q$SULO58,=PDGHD:HVWHUQ8QLRQSD\PHQWRI(XURVWR1&LQ
0DULERU6ORYHQLD7KLVSD\PHQWGLUHFWO\PDWFKHVHPDLOFRUUHVSRQGHQFHEHWZHHQ
QHWNDLUR#KRWPDLOFRPDQGLVHUGR#JPDLOFRPRQ$SULOZKHUH58,=SURYLGHGYDULRXV
%)%27SDUDPHWHUVWR6.25-$1&2Q$XJXVWPDGHDQRWKHU:HVWHUQ8QLRQ
payment of €500 to 1&LQ0DULERU6ORYHQLD
58,=XVHGDFXVWRPL]HGYHUVLRQRIWKH%)%27WRFROOHFW,QWHUQHWORJLQ
FUHGHQWLDOVDQGFUHGLWFDUGLQIRUPDWLRQ7KH%)%27JDWKHUHGWKLVLQIRUPDWLRQLQPXOWLSOHZD\V
Case 1:11-mj-00321-AK Document 1-1 Filed 05/12/11 Page 19 of 41
A search of RUIZ’s residence at the time of his arrest in February 2010 yielded a Universal
6HULDO%XV86%IODVKPHPRU\GULYHWKDWZDVXVHGE\58,=WRVWRUHQXPHURXVORJILOHV
JHQHUDWHGE\WKH%)%278VHUPDQXDOVDVVRFLDWHGZLWKPXOWLSOHYHUVLRQVRI%)%27ZHUHDOVR
found on RUIZ’s memory drive. 7KHVHPDQXDOVGHVFULEHWKDW%)%27LVGHVLJQHGWRVSUHDG
VXUUHSWLWLRXVO\WRYLFWLPFRPSXWHUVDQGFROOHFWXVHUQDPHVDQGSDVVZRUGVIURP,QWHUQHWEURZVHU
ILOHV7KHVHGRFXPHQWVIXUWKHUGHVFULEH%)%27DVFDSDEOHRIH[HFXWLQJD''26DWWDFNDQG
LQVWDOOLQJDGGLWLRQDOPDOZDUHRQYLFWLPFRPSXWHUV7KHVHGRFXPHQWVFUHGLW“LVHUGR”DVWKH
GHYHORSHURI%)%27DQGLQFOXGHLVHUGR#JPDLOFRPDVDPHWKRGRIFRQWDFW
Butterfly Bot source code was also located on RUIZ’s flash mHPRU\GULYH7KH
VRXUFHFRGHILOHVLQGLFDWH“&RS\ULJKWFE\LVHUGR”LQWKHILOHKHDGHU,QDGGLWLRQWRWKHVH
GRFXPHQWVDFRS\RIWKHPDOZDUHILOHEIQHWNDLURUDUVHQWWR58,=DWQHWNDLUR#KRWPDLOFRP
IURP6.25-$1&DWLVHUGR#JPDLOFRPRQ'HFHPEHr 29, 2008 was located on RUIZ’s flash
PHPRU\GULYHThe version sent via email and the version located on RUIZ’s flash memory
GULYHZHUHGHWHUPLQHGWREHLGHQWLFDOWKURXJKWKHXVHRIGLJLWDOILQJHUSULQWLQJWRROVUHJXODUO\
XVHGWRLGHQWLI\DQGDQDO\]HPDOZDUH
7KH%)%27JHQHUDWHVYDULRXVORJILOHVWKDWUHFRUGWKHVSUHDGRIWKHPDOZDUHWR
YLFWLPFRPSXWHUVDVZHOODVWKHWKHIWRI,QWHUQHWFUHGHQWLDOVDQGFUHGLWFDUGLQIRUPDWLRQ$Q
DQDO\VLVRI58,=
VIODVKPHPRU\GULYHUHYHDOHGWKDW58,=VWRUHGQXPHURXVORJILOHVJHQHUDWHG
E\WKH%)%277KHORJILOHVDUHJHQHUDWHGDXWRPDWLFDOO\DQGVWRUHGLQIROGHUVDOVRFRQWDLQLQJ
%)%27PDOZDUH7KHIROGHUVFRQWDLQLQJWKHORJILOHVKDYHQDPHVDVVRFLDWHGZLWK%)%27VXFK
DV“EI”RU“EI”7KHORJILOHVVKRZWKHFRPSXWHUFRPSURPLVHGDVZHOODVWKHVSHFLILF
XVHUQDPHSDVVZRUGRUFUHGLWFDUGLQIRUPDWLRQVWROHQ,QWRWDOORJILOHVIRXQGRQ58,=
VIODVK
PHPRU\GULYHFRQWDLQRYHUXVHUQDPHSDVVZRUGSDLUVDQGDSSUR[LPDWHO\LQVWDQFHV
Case 1:11-mj-00321-AK Document 1-1 Filed 05/12/11 Page 20 of 41
RIFUHGLWFDUGLQIRUPDWLRQ%DVHGXSRQP\H[SHULHQFHFROOHFWLQJWKLVLQIRUPDWLRQLVRIWHQDQ
LPSRUWDQWVWHSLQYDULRXVVFKHPHVWRIUDXGXOHQWO\REWDLQPRQH\VHUYLFHVDQGSURSHUW\IURP
XQZLWWLQJYLFWLPVLQFOXGLQJLQGLYLGXDOVPHUFKDQWDQGILQDQFLDOLQVWLWXWLRQV)RUH[DPSOHWKH
FUHGLWFDUGLQIRUPDWLRQFRXOGEHXVHGLQDVFKHPHWRREWDLQRUDWWHPSWWRREWDLQSURSHUW\LQWKDW
LQGLYLGXDOVPLVUHSUHVHQWWKHPVHOYHVDVWKHOHJLWLPDWHDFFRXQWKROGHUVZKHQWKH\DUHQRWDQG
WKHUHDIWHUREWDLQPRQH\VHUYLFHVRUSURSHUW\XVLQJWKHDFFRXQW
,QODWH)HEUXDU\6SDQLVKDXWKRULWLHVDUUHVWHG58,=DORQJZLWKWZR
DGGLWLRQDOLQGLYLGXDOVNQRZQKHUHDIWHUE\WKHLUDOLDVHV2VWLDWRUDQG:HNHZKRZHUHZRUNLQJ
ZLWK58,=WRFRQWUROWKH0DULSRVDERWQHW:HNHDLGHGLQWKHVSUHDGRIWKHPDOZDUHWRJURZWKH
ERWQHW)XUWKHUPRUH:HNHSDLG6.25-$1&IRUPDOZDUHDQGDFWHGDVDQLQWHUPHGLDU\WR
SURYLGH''26VHUYLFHVWRFOLHQWVWKURXJKWKHXVHRIWKH0DULSRVD%RWQHW2VWLDWRUVKDUHG
DGPLQLVWUDWLRQUHVSRQVLELOLWLHVIRUWKH0DULSRVD%RWQHWZLWK58,=58,=SDUWLFLSDWHGLQ''26
DWWDFNVDQGH[WRUWLRQWKURXJKWKHXVHRI''26DWWDFNVDVZHOODVFROOHFWLQJDQGWUDGLQJRQOLQH
FUHGHQWLDOVDQGFUHGLWFDUGLQIRUPDWLRQ
58,=XVHGWKH0DULSRVD%RWQHWWRH[HFXWHD''26DWWDFNDJDLQVWZHEVLWH
ZZZWHOHJURZFRPIRUWKHSXUSRVHRIH[WRUWLRQ$FFRUGLQJWRFKDWORJVREWDLQHGGXULQJWKH
search of RUIZ’s residence and analyzed by the Spanish Guardia Civil, the administrators of
ZZZWHOHJURZFRPZHUHVXFFHVVIXOO\H[WRUWHGIRU(XUR$FFRUGLQJWRWKH6SDQLVK*XDUGLD
&LYLOWKHSXUSRVHRIWKHDWWDFNZDVWRUHTXHVWDQDPRXQWRIPRQH\LQOLHXRIVWRSSLQJWKHDWWDFN
$QLQGLYLGXDONQRZQE\WKHDOLDV“7RUEH”FRQWDFWHG58,=DQG2VWLDWRUWRUHTXHVW
WKDWWKH\H[HFXWHD''26DWWDFNDJDLQVWTorbe’s EXVLQHVVFRPSHWLWLRQ&KDWORJVREWDLQHG
during the search of RUIZ’s residenceDQGDQDO\]HGE\WKH6SDQLVK*XDUGLD&LYLOGHPRQVWUDWH
WKDW58,=DQG2VWLDWRULQWHQWLRQDOO\H[HFXWHGD''26DWWDFNDJDLQVWVHYHUDOZHEVLWHVDWWKH
Case 1:11-mj-00321-AK Document 1-1 Filed 05/12/11 Page 21 of 41
UHTXHVWRI7RUEH$PRQJWKRVHZHEVLWHVDWWDFNHGDUHZZZLULQDYHJDFRPZZZ[QHWHV
ZZZ[FDQDOHVDQGZZZJUXSRLIJFRP7RUEHSDLG58,=DQGKLVDVVRFLDWHVIRUWKLVVHUYLFH
$FFRUGLQJWRLQIRUPDWLRQFROOHFWHGE\DQ,QWHUQHWLQGXVWU\ZRUNLQJJURXSRYHU
WHQPLOOLRQXQLTXH,QWHUQHW3URWRFRO,3DGGUHVVHVDUHNQRZQWRKDYHEHHQFRPSURPLVHGE\WKH
0DULSRVD%RWQHW$WOHDVWPLOOLRQ,3DGGUHVVHVZHUHNQRZQWRKDYHEHHQVLPXOWDQHRXVO\
LQIHFWHG$PRQJWKHVHRYHU,3DGGUHVVHVKDYHEHHQLGHQWLILHGDVEHORQJLQJWRKRVWV
ZLWKLQWKH8QLWHG6WDWHV$SSUR[LPDWHO\,3DGGUHVVHVDUHUHJLVWHUHGWRHQWLWLHVLQ
:DVKLQJWRQ'&6L[RIWKRVH,3DGGUHVVHVZLWKLQDUHUHJLVWHUHGWR8QLWHG6WDWHV*RYHUQPHQW
HQWLWLHVZLWKLQWKH'LVWULFWRI&ROXPELD7KHDFWXDOVL]HDQGVSUHDGRIWKH0DULSRVD%RWQHWPD\
KDYHEHHQPXFKODUJHU
7KH)%,UHYLHZHGIRUXPSRVWLQJVRQGDUNRGHFRPREWDLQHGE\D&+6WKDWUHODWH
WR58,=XVLQJWKHPRQLNHU1H7.DQGWKH0DULSRVD%RWQHW7KHSRVWLQJVVWDWHWKDWWKH
0DULSRVD%RWQHWKDG“JRRJOHKLMDFNIXQFWLRQDOLW\”,Q)HEUXDU\DQ)%,&+6
FRPPXQLFDWHGFRYHUWO\ZLWK6.25-$1&DQGGLVFXVVHGWKH0DULSRVD%RWQHW6.25-$1&
VWDWHG
,GLGVRIWZDUHIRUPDULSRVDLWVEIERWEXWLWKDVFRQQHFWKRRNSRVWGDWDJUDEEHUDQGVRPH
JRRJOHWKLQJLHZLWKPRGLILHGSRO\HQJLQHWKDWVLW”
7KH&+6DVNHG6.25-$1&LIWKH&+6FRXOGSXUFKDVH0DULSRVDDQG6.25-$1&VWDWHG
DVIRUWKLVJRRJOHWKLQJLHLPQRWVHOOLQJ\RXZRXOGKDYHWRRIIHUUHDOO\JRRGPRQH\WR
JHWLWRIFRXUVHDOOZRUNVZLWKEII>%XWWHU)O\)ORRGHU@”
7KH&+6WKHQDVNHGKRZPXFK6.25-$1&ZRXOGFKDUJHIRUWKH“FRQQHFWKRRNSRVWGDWD
JUDEEHU”DQG,VHUGRVWDWHG
FKLVHXUSGJLVHXULI\RXEX\WKHPWRJHWKHULWVHXUUHDGKHUHDERXWEII
PRGXOHVKWWSGDUNRGHFRPYLHZWRSLFSKS"W VWDUW ”
Case 1:11-mj-00321-AK Document 1-1 Filed 05/12/11 Page 22 of 41
,QWKLVFRQYHUVDWLRQ,XQGHUVWDQG“FK”WRPHDQ&RQQHFW+RRNDQG“SGJ”WRPHDQ“SRVWGDWD
JUDEEHU”DSDVVZRUGVWHDOLQJWRRO)LQDOO\WKH&+6DVNHG,VHUGRDERXWLQFOXGLQJ061VSUHDGHU
IXQFWLRQDOLW\ZKLFKZRXOGDOORZWKHERWWRVSUHDGYLD0610HVVHQJHULQWKH%XWWHU)O\%RW
DQG6.25-$1&VWDWHG
PVQVSUHDGHUXVEEDVLFIORRGHUDQGYLVLWDUHIUHHPRGXOHV
58,=DOVRSURILWHGE\VHOOLQJDFFHVVWRWKHFRPSURPLVHGFRPSXWHUVWKDWZHUHSDUW
RIKLV0DULSRVD%RWQHW7KHDFFHVVFRQVLVWHGRIXSORDGLQJDQGLQVWDOOLQJPDOLFLRXVVRIWZDUH
SURYLGHGE\RWKHULQGLYLGXDOVRQWRWKHSUHYLRXVO\FRPSURPLVHGFRPSXWHUVRIKLVERWQHWIRUD
SULFH.QRZQDV“LQVWDOOV”WKHLQVWDOODWLRQRIDGGLWLRQDOPDOLFLRXVVRIWZDUHZDVQHJRWLDWHGRQD
SULFHSHUFRPSXWHU
58,=DGYHUWL]HGWKHVDOHRILQVWDOOVRQWKH'DUNRGHIRUXP)RUH[DPSOHRQ
'HFHPEHUDQLQGLYLGXDOZLWKWKHPRQLNHUB[XVWDUWHGDIRUXPWKUHDGDVNLQJLI
DQ\RQHRQWKHIRUXPZDVZLOOLQJWRVHOOLQVWDOOVIRUKLVPDOZDUH58,=XVLQJKLVPRQLNHU
1H7.UHVSRQGHGWRKLVSRVWRQ'HFHPEHUE\SRVWLQJ“NPL[LIXZDQWSPPH”
%DVHGRQP\WUDLQLQJDQGH[SHULHQFHI understand RUIZ’s reply to mean that KHKDGDERWQHW
FRQVLVWLQJRISUHYLRXVO\FRPSURPLVHGFRPSXWHUVWKDWZHUHORFDWHGDOODURXQGWKHZRUOG
DQGWKDWLIWKHSRWHQWLDOEX\HUZDVLQWHUHVWHGLQSXUFKDVLQJDFFHVVWRLQVWDOOKLVVRIWZDUHKHFRXOG
UHDFK58,=E\SULYDWHPHVVDJHYLDWKH'DUNRGHIRUXP
2Q'HFHPEHUDQ)%,8QGHUFRYHU(PSOR\HHKHUHLQDIWHU“8&”VHQW
58,=DSULYDWHPHVVDJHRQ'DUNRGHDVNLQJLIKHKDGLQVWDOOVIRUVDOH8&SURYLGHG58,=ZLWK
DQHPDLODGGUHVVDVVRFLDWHGZLWKDQ0610HVVHQJHURQOLQHLQVWDQWPHVVDJLQJDFFRXQWDQGDVNHG
IRU58,=WRFRQWDFW8&
Case 1:11-mj-00321-AK Document 1-1 Filed 05/12/11 Page 23 of 41
2Q-DQXDU\58,=XVLQJWKHHPDLODGGUHVVKDPOHW#KRWPDLOFRPDQG
WKHPRQLNHU“1H7.”FRQWDFWHG8&YLD061,QVWDQW0HVVHQJHU,QWKHRQOLQHFRQYHUVDWLRQ
58,=VROGDFFHVVWRKLVERWQHWIRUWKHSXUSRVHRILQVWDOOLQJPDOZDUHRQWKHFRPSURPLVHG
FRPSXWHUV5UIZ controlled. RUIZ’s charged UCIRULQVWDOOV8&DQG58,=
DJUHHGWRXVHH3DVVSRUWHDQRQOLQHSD\PHQWVHUYLFHDVWKHPHWKRGRISD\PHQW58,=LQVWUXFWHG
8&WRVHQGSD\PHQWWRWKHH3DVVSRUWDFFRXQW“IORUHQFLRFDUUR”8&VHQWSD\PHQWRIWR
58,=YLDH3DVVSRDUWHWKDWVDPHGD\
58,=DVNHG8&IRUWKHH[HFXWDEOHSURJUDPWRLQVWDOORQWRWKHSUHYLRXVO\
FRPSURPLVHGFRPSXWHUVRIKLVERWQHW58,=ZDVSURYLGHGDQH[HFXWDEOHSURJUDPGHYHORSHG
E\WKH)%,WREHXSORDGHGWRWKHFRPSXWHUVRIWKHERWQHW7KHH[HFXWDEOHSURJUDPUHSRUWVWKH,3
DGGUHVVRIWKHLQIHFWHGFRPSXWHUVEDFNWRWKH)%,IRUWKHSXUSRVHRILGHQWLI\LQJYLFWLPVEXW
WDNHVQRRWKHUDFWLRQ$IWHUSURYLGLQJ58,=ZLWKWKHH[HFXWDEOHSURJUDP58,=WROG8&WKDW
KHZDVJRLQJWRVWDUWWKHLQVWDOODWLRQ%HWZHHQ-DQXDU\DQG-DQXDU\WKH
H[HFXWDEOHSURJUDPSURYLGHGWR58,=ZDVLQVWDOOHGRQRYHUSUHYLRXVO\FRPSURPLVHG
FRPSXWHUVORFDWHGZRUOGZLGH
,QIRUPDWLRQIURPH3DVVSRUWHVKRZHGWKDWWKHVXEVFULEHUIRUWKH“IORUHQFLRFDUUR”
DFFRXQWZDV)ORUHQFLR&DUURUHVLGLQJDW$9/DQ]DJRUWDE=DOOD6SDLQ2Q-DQXDU\
ORJLQDFWLYLW\VKRZHGWKDW,3DGGUHVVDFFHVVHGWKLVDFFRXQW7KLV,3DGGUHVV
UHVROYHVWRDFRPSXWHUORFDWHGLQ6SDLQ7KLVH3DVVSRUWHDFFRXQWZDVDVVRFLDWHGZLWKWKHHPDLO
DGGUHVVIOR[WHU#KRWPDLOFRP
,QIRUPDWLRQREWDLQHGIURP0LFURVRIWVKRZVWKDWWKHHPDLODGGUHVV
KDPOHW#KRWPDLOFRPZDVDFFHVVHGIURP,3DGGUHVVRQ-DQXDU\$V
VWDWHGSUHYLRXVO\WKLV,3DGGUHVVUHVROYHVWRDFRPSXWHUORFDWHGLQ6SDLQ
Case 1:11-mj-00321-AK Document 1-1 Filed 05/12/11 Page 24 of 41
2Q)HEUXDU\DVHDUFKZDUUDQWZDVFRQGXFWHGDWWKHUHVLGHQFHRI
)/25(1&,2&$55258,=ORFDWHGDW&DOOH/D&DO]DGD'LQWKHORFDOLW\RI9LVFD\D
E\WKH6SDQLVK*XDUGLD&LYLO,QFRQQHFWLRQZLWKWKHVHDUFKZDUUDQWVHYHUDOGLJLWDOLWHPVZHUH
VHL]HG2QHRIWKHLWHPVVHL]HGZDVD0DFLQWRVKFRPSXWHU$UHYLHZRIWKHFRQWHQWVRIWKH
VHL]HGHYLGHQFHVKRZHGWKDWWKH0610HVVHQJHUDFFRXQWDVVRFLDWHGZLWK
KDPOHW#KRWPDLOFRPZDVDFFHVVHGIURPWKDWFRPSXWHU,QDGGLWLRQDQ0610HVVHQJHU
DFFRXQWDVVRFLDWHGZLWKIOR[WHU#KRWPDLOFRPZDVDFFHVVHGIURPWKHVHL]HGFRPSXWHU
$FFRUGLQJWRWKH6SDQLVK*XDUGLD&LYLODQRWKHUFRPSXWHUVHL]HGLQWKHVHDUFK
warrant contained a file in the computer’s InterQHW([SORUHU&DFKHWKDWDVVRFLDWHGWKHFRPSXWHU
WRWKH,3DGGUHVV
,&(0$1–0(1725/(1,4,
2QRUDERXW$SULODQLQGLYLGXDOZLWKWKHPRQLNHU“,FHPDQ”SRVWHGD
WKUHDGRQ'DUNRGHDGYHUWLVLQJWKHVDOHRIVHUYHUVWKDWZHUHFRPSURPLVHG$VSDUWRIWKHVHUYHU
FRPSURPLVHDGPLQLVWUDWLYHDFFHVVRU“URRW”DFFHVVWRWKHVHUYHUVZDVJDLQHG$QLQGLYLGXDO
ZLWKURRWDFFHVVKDVWKHDELOLW\WRWDNHIXOOFRQWURORIWKHVHUYHU:LWKIXOOFRQWUROWKHVHUYHUFDQ
EHXVHGWRFRQGXFWIXUWKHULOOHJDODFWLYLW\LQFOXGLQJKRVWLQJWKHFRPPDQGDQGFRQWURORIDERWQHW
UXQQLQJDZHEVLWHWKDWGLVWULEXWHVPDOLFLRXVSURJUDPVRUGLVWULEXWLQJWUDGHPDUNHGVRIWZDUH
,QUHVSRQVHWRIceman’sSRVWLQJ8&FRQWDFWHG,FHPDQRQ'DUNRGHDQG
FRPPXQLFDWHGKLVGHVLUHWRSXUFKDVHURRWDFFHVVWRWKHVHUYHUV8&SURYLGHG,FHPDQZLWKDQ
HPDLODGGUHVVDVVRFLDWHGZLWKD0610HVVHQJHURQOLQHLQVWDQWPHVVDJLQJDFFRXQWDQGDVNHGIRU
,FHPDQWRFRQWDFW8&
Case 1:11-mj-00321-AK Document 1-1 Filed 05/12/11 Page 25 of 41
2Q$SULO,FHPDQFRQWDFWHG8&YLD0610HVVHQJHUDQGLGHQWLILHGE\
WKHHPDLODFFRXQWLFH#LFHPDQLQ8&ZDVFRPPXQLFDWLQJIURPDFRPSXWHUWKDWZDV
FRQQHFWHGWRDSUR[\VHUYHUORFDWHGZLWKLQWKH'LVWULFWRI&ROXPELD$VDUHVXOWDOO,QWHUQHW
WUDIILFWRDQGIURP8&1’s computer was being filtered though the proxy serYHU,QWKH
FRQYHUVDWLRQ,FHPDQVWDWHGWKDWKHKDGURRWDFFHVVWRVHYHUDOVHUYHUV,FHPDQIXUWKHUH[SODLQHG
WKDWWKHFRPSURPLVHGVHUYHUVZHUHORFDWHGLQGLIIHUHQWGDWDFHQWHUVDQGORFDWHGLQWKH8QLWHG
6WDWHV(XURSH5XVVLDDQG&KLQD,FHPDQIXUWKHUSURYLGHGWKDWKHJDLQHGDFFHVVWRWKHVHUYHUV
E\VFDQQLQJIRUYXOQHUDEOHVHUYHUV2QFHKHJDLQHGDFFHVVWRWKHVHUYHUVKHGLGQRWFKDQJHWKH
SDVVZRUGV
,FHPDQQHJRWLDWHGWKHVDOHRIWKLUWHHQVHUYHUVIRUZKLFKKHKDGURRWDFFHVVWR8&
IRU,FHPDQVHQW8&DILOHQDPHG“VKLWVW[W”WKDWFRQWDLQHGWKH,3DGGUHVVHVRIWKH
FRPSURPLVHGVHUYHUVDORQJZLWKWKHSDVVZRUG7KHOLVWSURYLGHGWKH,3DGGUHVVHVDQGSDVVZRUGV
IRUILIWHHQVHUYHUVHOHYHQRIZKLFKZHUHORFDWHGZLWKLQWKH8QLWHG6WDWHV8&DQG,FHPDQ
DJUHHGWRXVH3D\3DODQRQOLQHSD\PHQWVHUYLFHDVWKHPHWKRGRISD\PHQW,FHPDQLQVWUXFWHG
8&WRVHQGSD\PHQWWRWKH3D\3DODFFRXQWLGHQWLILHGE\WKHHPDLODGGUHVV
OHQLTLPHQWRU#VLROQHW8&VHQWSD\PHQWRIWR,FHPDQYLD3D\3DOWKDWVDPHGD\
$IWHUWKHWUDQVDFWLRQ,FHPDQWROG8&WKDWKHZDVORFDWHGLQWKHVDPHFLW\DV
,VHUGRDQGWKDWKHKDGSXUFKDVHGWKH%)%27IURPKLP,FHPDQIXUWKHUSURYLGHGWKDWKHKDG
XVHGWKHPDOLFLRXVVRIWZDUHWRPDNHKLVRZQERWQHW
,QIRUPDWLRQIURP3D\3DOVKRZHGWKDWWKH3D\3DODFFRXQWDVVRFLDWHGZLWKWKH
HPDLODGGUHVVOHQLTLPHQWRU#VLROQHWZDVVXEVFULEHGE\0(1725/(1,4,UHVLGLQJDW
*RULVQLFD0DULERU6ORYHQLD2Q$SULOORJLQDFWLYLW\VKRZHGWKDWWKH,3DGGUHVV
Case 1:11-mj-00321-AK Document 1-1 Filed 05/12/11 Page 26 of 41
DFFHVVHGWKLVDFFRXQW7KLV,3DGGUHVVUHVROYHVWRDFRPSXWHUORFDWHGLQ
6ORYHQLD
2Q-XO\DVHDUFKZDUUDQWZDVH[HFXWHGE\WKH6ORYHQLDQ1DWLRQDO3ROLFH
DWWKHUHVLGHQFHRI0(1725/(1,4,“/(1,4,”ZKRUHVLGHGDW*RULVQLFD0DULERU
6ORYHQLD6HYHUDOLWHPVRIHYLGHQWLDU\YDOXHLQFOXGLQJGLJLWDOHYLGHQFHZHUHFROOHFWHG$
UHYLHZRIDFRPSXWHUVHL]HGIURP/(1,4,FRQWDLQHGDILOHQDPHG“VKLWVW[W”7KHILOHFRQWDLQHG
WKH,3DGGUHVVDQGSDVVZRUGWRWKLUWHHQRIWKHILIWHHQVHUYHUVSURYLGHGWR8&7KHFRPSXWHU
DOVRFRQWDLQHGDORJRIWKHFKDWFRQGXFWHGZLWK8&
)ROORZLQJWKHVHDUFKRI/(1,4,‘s UHVLGHQFH/(1,4,ZDVFRQWDFWHGDQG
FRQVHQWHGWRDYROXQWDU\LQWHUYLHZZLWKWKH6ORYHQLDQ1DWLRQDO3ROLFHDWWKH6ORYHQLDQ&ULPLQDO
3ROLFH2IILFHVLQ0DULERU6ORYHQLD/(1,4,ZDVQRWXQGHUDUUHVWDQGDJUHHGWRKDYH)%,
$JHQWVSUHVHQWGXULQJWKHLQWHUYLHZ,QWKHLQWHUYLHZ/(1,4,VWDWHGWKDWKHXVHVWKHRQOLQH
PRQLNHU“LFHPDQ”DQGWKHHPDLODGGUHVVLFH#LFHPDQLQ/(1,4,DOVRVWDWHGWKDWKHXVHVWKH
DFFRXQWLFH#LFHPDQLQIRUKLV,&4DQG0610HVVHQJHUDFFRXQWV/(1,4,VWDWHGWKDWKHZDVD
PHPEHURIWKH'DUNRGHIRUXPDQGXVHVWKHQDPH“LFHPDQ”RQWKHIRUXP
/(1,4,WROGWKHLQWHUYLHZLQJ)%,$JHQWVWKDWKHKDGVROGURRWDFFHVVWRVHUYHUV
SURYLGHGWRKLPE\DSHUVRQNQRZQDV“%X]”7KLVLQGLYLGXDORSHUDWHVDQ,5&EDVHGERWQHWWKDW
LVDEOHWRFUDFNSDVVZRUGVRQZHEKRVWLQJDFFRXQWVDQGVHUYHUV7KHERWQHWVFDQVIRUFRPPRQ
ZHEKRVWLQWHUIDFHVVXFKDVF3DQHODQGWKHQDWWHPSWVDEUXWHIRUFHSDVVZRUGDWWDFNRQWKH
VHUYHUV,IVXFFHVVIXOWKH,3DGGUHVVDQGFUDFNHGFUHGHQWLDOVDUHGLVSOD\HGLQDQ,5&FKDQQHO
/(1,4,KDGDFFHVVWRWKLV,5&FKDQQHODQGWKLVLVKRZKHREWDLQHGWKHFUHGHQWLDOVIRUWKH
DFFRXQWVWKDWKHVROG/(1,4,DOVRVWDWHGWKDWKHVROGDFFHVVWRFRPSURPLVHGVHUYHUVWRRWKHU
'DUNRGHPHPEHUV
Case 1:11-mj-00321-AK Document 1-1 Filed 05/12/11 Page 27 of 41
/(1,4,DOVRWROGWKHLQWHUYLHZLQJDJHQWVWKDWKHKDGSXUFKDVHGWKH%XWWHUIO\
)ORRGHU%RWIURP6.25-$1&/(1,4,VWDWHGWKDWKHZDVLQWURGXFHGWR6.25-$1&E\DQ
LQGLYLGXDOZKRKDGSXUFKDVHGWKHERWWRFRQGXFW''26DWWDFNV/(1,4,WKHQFRQWDFWHG
6.25-$1&DWWKHHPDLODGGUHVVLVHUGR#JPDLOFRP/(1,4,FRQWDFWHG6.25-$1&WKURXJK
WKLVDFFRXQWDQGDUUDQJHGWRSXUFKDVHDFRS\RIWKHERWIRU(XUR
,QWKHUHYLHZRIWKHVHDUFKZDUUDQWUHVXOWVIRUWKHHPDLODFFRXQW
LVHUGR#JPDLOFRPRQ2FWREHUDQHPDLOZDVORFDWHGWKDWRULJLQDWHGIURPHPDLODGGUHVV
LFHPDQJMN#KRWPDLOFRP,QWKHHPDLO/(1,4,SURYLGHG6.25-$1&WKHLQIRUPDWLRQ
QHFHVVDU\WRFXVWRPL]H/(1,4,’s copy of the BFBOT, including WKUHHGRPDLQQDPHVWKDW
/(1,4,ZRXOGXVHWRDGPLQLVWHUWKHERWDORQJZLWKRWKHUWHFKQLFDOLQIRUPDWLRQUHTXHVWHGE\
6.25-$1&
$VHDUFKRIDFRPSXWHUVHL]HGE\WKH6ORYHQLDQ1DWLRQDO3ROLFHUHYHDOHGDILOH
QDPHGLQIRW[WWKDWFRQWDLQHGWKHVDPHLQIRUPDWLRQSURYLGHGLQWKHHPDLOE\/(1,4,WR
6.25-$1&/RFDWHGRQWKHVDPHFRPSXWHUD%XWWHUIO\%RWIROGHUZDVIRXQG,QVLGHRIWKH
IROGHUVHYHUDOORJILOHVZHUHIRXQG7KHILUVWORJILOHQDPHGFKDQBORJVKRZHGYLFWLP
FRPSURPLVHGFRPSXWHUVMRLQLQJDQGTXLWWLQJDFRPPDQGDQGFRQWUROVHUYHU$ILOHQDPHG
FKDQBORJVKRZHGYLFWLPFRPSXWHUVWKDWZHUHUXQQLQJWKH86%VSUHDGLQJFDSDELOLWLHVRIWKH
%XWWHUIO\%RW$ILOHQDPHGFKDQBORJVKRZHGYLFWLPFRPSXWHUVVSUHDGLQJWKHERWYLD061
0HVVHQJHUVSUHDGLQJ$ILOHQDPHGFKDQBORJVKRZHGYLFWLPFRPSXWHUVGRZQORDGLQJYLDSHHU
WRSHHUDILOHQDPHG“DPJHOLQDSRUQYLGHRGRZQDORGH[H”$ILOHQDPHGFKDQBORJVKRZHG
WKHLQIHFWHGGULYHVIRUHDFKRIWKHYLFWLPFRPSXWHUV$ILOHQDPHGFKDQBORJVKRZHGDVHUYHU
EHLQJDWWDFNHGE\D'LVWULEXWHG'HQLDORI6HUYLFHDWWDFN$ILOHQDPHGFKDQBORJVKRZHGGDWD
FROOHFWHGIURPWKHZHEEURZVHUVRIYLFWLPFRPSXWHUV7KHGDWDFROOHFWHGLQFOXGHGXVHUQDPHDQG
Case 1:11-mj-00321-AK Document 1-1 Filed 05/12/11 Page 28 of 41
SDVVZRUGVIURPIRUPGDWD$ILOHQDPHGFKDQBORJDSSHDUHGWRFRQWDLQWKH,3DGGUHVVHVRI
FRPSURPLVHGYLFWLPFRPSXWHUVWKDWFRXOGEHRSHUDWHGUHPRWHO\
$OVRSUHVHQWLQWKH%XWWHUIO\%RWIROGHUZDVDXVHUPDQXDOLQGLFDWLQJWKDWWKH
VRIWZDUHSRVVHVVHGE\/(1,4,ZDVYHUVLRQRI%XWWHU)O\%RW352)(66,21$/$ILOH
QDPHGVHWWLQJVLQLVKRZHGWKDW/(1,4,’sERWVZHUHFRQQHFWLQJWRDFRPPDQGDQGFRQWUROVHUYHU
LGHQWLILHGE\WKH,3DGGUHVV7KLV,3DGGUHVVUHVROYHVWRDVHUYHUORFDWHGLQ
6ORYHQLDDQGDFFRUGLQJWRWKHSXEOLFDOO\DYDLODEOHZHEVLWHZZZFHQWUDORSVQHWWKLV,3DGGUHVV
LVUHJLVWHUHGWR/(1,4,*25,61,&$$6/29(1,$0RUHRYHUWKHGRPDLQDVVRFLDWHGZLWK
WKHDERYHUHIHUHQFHG,3DGGUHVVLVZHEPDLOQJXOHVKLQIR7KLVGRPDLQLVRQHRIWKHGRPDLQV
SURYLGHGE\/(1,4,WR6.25-$1&XSRQSXUFKDVLQJWKH%XWWHUIO\%RWRQ2FWREHU
7KHGLJLWDOHYLGHQFHVHL]HGE\WKH6ORYHQLDQ1DWLRQDO3ROLFHDOVRFRQWDLQHGVDYHG
RQOLQHFKDWORJV2Q-DQXDU\/(1,4,FRQGXFWHGDQRQOLQHFKDWZLWK58,=FRQWDFWLQJ
58,=XVLQJWKH0610HVVHQJHUDFFRXQWDVVRFLDWHGZLWKKDPOHW#KRWPDLOFRP,QWKH
FKDW/(1,4,DVNHG58,=WRLQVWDOOPDOLFLRXVVRIWZDUHRQWRSUHYLRXVO\FRPSURPLVHG
FRPSXWHUV/(1,4,WROG58,=WKDWKHQHHGHG58,=WRXSORDGDQGLQVWDOOWKH%XWWHUIO\)ORRGHU
%RWWKDWZDVWREHSURYLGHGE\6.25-$1&/(1,4,WKHQDVNV58,=LIKHNQRZVRID
FRPPDQGRQWKH%XWWHUIO\)ORRGHU%RWWKDWZRXOGFRQGXFWD'LVWULEXWHG'HQLDORI6HUYLFHDWWDFN
WKDWZRXOGUXQVLOHQWO\RQDVHUYHU58,=WKHQUHVSRQGHGEDFNWR/(1,4,ZLWKD%XWWHUIO\
)ORRGHUFRPPDQGWKDWZRXOGSHUIRUPDVLOHQW''26DWWDFN
2Q-DQXDU\/(1,4,DVNHG58,=LIWKH%XWWHUIO\)ORRGHU%RWKDVD
VWURQJ''26DWWDFN58,=UHVSRQGHGWKDWWKHERWGRHVKDYHDVWURQJDWWDFN
2Q'HFHPEHU/(1,4,FRQGXFWHGDQRQOLQHFKDWFRQYHUVDWLRQZLWK
6.25-$1&LGHQWLILHGE\WKHHPDLODGGUHVVLVHUGR#JPDLOFRP,QWKHFKDW/(1,4,WHOOV
Case 1:11-mj-00321-AK Document 1-1 Filed 05/12/11 Page 29 of 41
6.25-$1&WKDWKHLVLQWHUHVWHGLQSXUFKDVLQJWKH%XWWHUIO\)ORRGHU%RW/(1,4,H[SUHVVHGWKH
QHHGIRUWKH%XWWHUIO\)ORRGHU%RWWRKDYHJRRG'LVWULEXWHG'HQLDORI6HUYLFH$WWDFN
FDSDELOLWLHV6.25-$1&UHSOLHGWKDWWKHERW“KDVDJRRGDWWDFN”DQGZDV“WKHEHVW”
6.25-$1&WKHQH[SODLQHGWR/(1,4,KRZEHVWWRFRQGXFWD''26DWWDFNXVLQJWKH“7&3
IORRGLQJFDSDELOLWLHV”RIWKH%XWWHUIO\)ORRGHUERW
7KH6ORYHQLDQ1DWLRQDO3ROLFHSURYLGHGWKH)%,ZLWKWKHFRQWHQWVRIDFKDWWKDW
RFFXUUHGEHWZHHQ6.25-$1&DQG/(1,4,RQ-DQXDU\,QWKLVFKDW6.25-$1&DQG
/(1,4,QHJRWLDWHGWKHSXUFKDVHRIWKH%XWWHU)O\)ORRGHU%RWIRU(XUR6.25-$1&WKHQ
LQVWUXFWHG/(1,4,WRVHQGWKHIXQGVWRDEDQNDFFRXQWORFDWHGLQ0DULERU6ORYHQLD/(1,4,
DVNHG6.25-$1&WRH[SODLQWKHSRVWGDWDJUDEEHUPRGXOHIRUWKH%XWWHUIO\)ORRGHU%RWD
FRQYHUVDWLRQFDSWXUHGLQWKHIROORZLQJFKDWWUDQVFULSW
30LFHPDQLVHUGRFDQ\RXVD\ZKDWVSHFLILFDWLRQKDVSRVWGDWDJUDEEHUDQGKRZ
PXFKLWFRVWV"
30LVHUGRHXU
30LVHUGRGUDZVLQDOOSRVWGDWDIURP,(
30LVHUGR+773DQG+773V
30LVHUGRIRUVWHDOLQJLQIR
30LVHUGRORJLQV
30LVHUGRSD\SDOHWF
30LVHUGREDQNV
30LFHPDQKXK
30LFHPDQWKLVLVQHDW
30LFHPDQVLPLODUWR,,,IEXW,,,IDUHEDGWKH\KDYHYHU\OLWWOHORJLQVHWF
30LFHPDQKPPLW
VWRRPXFKLILJHWWKLVDVZHOO
30LFHPDQHXUSKHZ
30LFHPDQLVLWSRVVLEOHWRJHWLWWRJHWKHUZLWKSRVWGDWDJUDEEHUIRUHXU"
30LVHUGRQRSHLWZRQ
WZRUN
30LVHUGREXWWKHWKLQJLVPXFKEHWWHUWKDQH[SORUHUSDVVJUDEEHU
30LVHUGRFDXVHKHUH\RX
OOKDYHFDWFKDOSDVVUHJDUGOHVVLILW
VVDYHGRUQRW3
30LVHUGRLQDQ\FDVH
30LVHUGRSUREOHPFDQEHRQO\ZLWKVRPHEDQNVWKDWKDYHWRNHQV
30LVHUGRWKDWDUHYDOLGIRURQO\DIHZVHFRQGV
Case 1:11-mj-00321-AK Document 1-1 Filed 05/12/11 Page 30 of 41
%DVHGRQP\WUDLQLQJDQGH[SHULHQFH,XQGHUVWDQG6.25-$1&WREHH[SODLQLQJWR
/(1,4,WKDWWKHSRVWGDWDJUDEEHUFROOHFWVWKH“3267GDWD”IURP0LFURVRIW,QWHUQHW([SORUHU
YHUVLRQVDQG7KHSRVWGDWDLVLQIRUPDWLRQWKDWLVVXEPLWWHGWRDZHEVLWHDIWHUDXVHUILOOV
RXWDZHEEDVHGIRUP6.25-$1&QRWHVWKDWWKHSRVWGDWDJUDEEHUFDQEHXVHGWRVWHDO
VHQVLWLYHORJLQLQIRUPDWLRQVXFKDVXVHUQDPHVDQGSDVVZRUGVIURPILQDQFLDOZHEVLWHV
2Q-DQXDU\/(1,4,WROG6.25-$1&WKDWKHKDGEDQNZLUHWUDQVIHUUHG
(XURWR6.25-$1&
2Q)HEUXDU\/(1,4,WROG6.25-$1&WKDWKHKDGEDQNZLUH
WUDQVIHUUHGWKHUHPDLQLQJIXQGVWR6.25-$1&6.25-$1&WKHQLQVWUXFWHG/(1,4,WR
SURYLGHKLPWKHXQLTXHLGHQWLILHUIRUKLVFRPSXWHUDQGWRVHQGKLPWKUHHGRPDLQVWRWKHHPDLO
DGGUHVVLVHUGR#JPDLOFRP/(1,4,UHSOLHGWR6.25-$1&WKDWKHKDGVHQWKLPWKHUHTXLUHG
HPDLO
2Q-XO\6.25-$1&DQG1&ZHUHDUUHVWHGE\6ORYHQLDQDXWKRULWLHVRQ
6ORYHQLDQFKDUJHVLQ0DULERU6ORYHQLD%RWKZHUHUHOHDVHGDIWHUWKH\ZHUHDUUHVWHG6ORYHQLDQ
DXWKRULWLHVKDYHFRQILUPHGWKDW6.25-$1&LVWKHUHDOLGHQWLW\RI,VHUGR
7+('$5.2'((17(535,6(
7KHHPDLOVWULQJEHORZLOOXVWUDWHVWKDWPHPEHUVKLSIRU'DUNRGHLVE\LQYLWDWLRQ
RQO\,QWKHVWULQJ6.25-$1&–XVLQJKLVDOLDV“,VHUGR”–LGHQWLILHVKLPVHOIDV“7KH
0DQDJHPHQW”RIGDUNRGHFRPDQGSURYLGHVDQHZXVHUZLWKLQVWUXFWLRQRQKRZWRDFFHVV
'DUNRGH
)URPLVHUGR#JPDLOFRPLVHUGR#JPDLOFRP!
6XEMHFW:HOFRPHWRGDUNRGHFRP)RUXPV
7R;;;;;;;;;;;
Case 1:11-mj-00321-AK Document 1-1 Filed 05/12/11 Page 31 of 41
'DWH6XQGD\1RYHPEHU30
:HOFRPHWRGDUNRGHFRP)RUXPV
3OHDVHNHHSWKLVHPDLOIRU\RXUUHFRUGV<RXUDFFRXQWLQIRUPDWLRQLVDV
IROORZV
8VHUQDPH;;;;;;;;;;
3DVVZRUG;;;;;;;;;;
<RXUDFFRXQWLVFXUUHQWO\LQDFWLYH<RXFDQQRWXVHLWXQWLO\RXYLVLWWKH
)ROORZLQJOLQN
KWWSIRUXPVGDUNRGHFRPSURILOHSKS"PRGH DFWLYDWHX ;;;;;;;;;;;;;;;
3OHDVHGRQRWIRUJHW\RXUSDVVZRUGDVLWKDVEHHQHQFU\SWHGLQRXUGDWDEDVHDQGZH
FDQQRWUHWULHYHLWIRU\RX
+RZHYHUVKRXOG\RXIRUJHW\RXUSDVVZRUG\RXFDQUHTXHVWDQHZRQHZKLFKZLOOEH
DFWLYDWHGLQWKHVDPHZD\DVWKLVDFFRXQW
7KDQN\RXIRUUHJLVWHULQJ
7KDQNV7KH0DQDJHPHQW
:KHQthe user responds that his password doesn’t work, SKORJANC informs
KLPWKDWKLVDFFRXQWKDVEHHQGHOHWHGGXHWRLQDFWLYLW\7KHXVHUWKHQDVNVKRZKHFDQUHJDLQ
DFFHVVWRWKHIRUXP6.25-$1&UHVSRQGVDVIROORZV
)URP6HUGR0XURLVHUGR#JPDLOFRP!
6XEMHFW5H:HOFRPHWRGDUNRGHFRP)RUXPV
7R;;;;;;;;;;;;
'DWH7XHVGD\)HEUXDU\30
VRPHRQHKDVWRLQYLWH\RXDJDLQZKRHYHULQYLWHG\RXDVNKLPWRLQYLWH\RXDJDLQ
$VVWDWHGSUHYLRXVO\WKH'DUNRGHIRUXPZKLFKZDVDGPLQLVWUDWHGE\
6.25-$1&GHVFULEHGLWVHOIDV“7KHEHVWPDOZDUHPDUNHWSODFHRQWKHQHW”7KHIRUXPLVD
Case 1:11-mj-00321-AK Document 1-1 Filed 05/12/11 Page 32 of 41
VHOIFRQWDLQHGPDUNHWJRYHUQHGE\UXOHVDQGORJLFWKDWFORVHO\PLPLFWKRVHRIWKHOHJLWLPDWH
EXVLQHVVZRUOGLQFOXGLQJH[SHFWDWLRQDERXWLWVPHPEHUV’FRQGXFWDQGDV\VWHPRIVWUDWLILFDWLRQ
EDVHGRQNQRZOHGJHVNLOODFWLYLWLHVDQGUHSXWDWLRQ7KHIRUXPDOVRKDVDQRUJDQL]HGVWUXFWXUH
DQGKLHUDUFK\LQZKLFKPHPEHUVDUHDVVLJQHGDVSHFLILFUDQNLQJEDVHGRQH[SHULHQFHDQG
UHSXWDWLRQDQGQHZPHPEHUVXQGHUJRDVFUHHQLQJRUSURPRWLRQSURFHVV,WVPHPEHUVDUH
QHWZRUNVRIYHWWHGLQGLYLGXDOVDJUHHLQJWRFRRSHUDWHIRUSDUWLFXODUFULPLQDORSHUDWLRQV7KH
PHPEHUVRIWKHIRUXPDUHKDYHVSHFLDOL]HGRFFXSDWLRQVSULPDULO\DVFRGHUVKDFNHUVDQG
YHQGRUVWRFRQGXFWVSHFLILFFULPLQDODFWLYLW\
7KH'DUNRGHIRUXPLVRUJDQL]HGLQWRWKHIROORZLQJKLHUDUFKLFDOIUDPHZRUN
DGPLQLVWUDWRUVZKRVHUYHDVWKHJRYHUQLQJFRXQFLOPRGHUDWRUVZKRRYHUVHHRQHRUPRUH
VXEMHFWPDWWHUVSHFLILFIRUXPVRQWKHVLWHDQGPHPEHUVZKRXVHWKHVLWHWRJDWKHUDQGSURYLGH
LQIRUPDWLRQDERXWSHUSHWUDWLQJFULPLQDODFWLYLW\
0HPEHUVRQWKHIRUXPXVHWKHLUVSHFLDOL]HGRFFXSDWLRQVWRIDFLOLWDWHDQGIXUWKHU
WKHFULPLQDODFWLYLW\RILWVRWKHUPHPEHUV7KHDFWLYLW\LVLOOXVWUDWHGE\D6HSWHPEHU
PHVVDJHWKUHDGLQLWLDWHGE\6.25-$1&HQWLWOHG“SSSURJUDPVDQGWKHLUVKDULQJIROGHU”,QWKH
WKUHDG6.25-$1&VHHNVDVVLVWDQFHIURPWKHPHPEHUVRI'DUNRGHLQGHYHORSLQJWKHFDSDELOLW\
RIKLVERWQHWVRIWZDUHWRVSUHDGLWVHOIWRRWKHUFRPSXWHUVYLD3HHUWR3HHUILOHVKDULQJ
,QKLVSRVW6.25-$1&VWDWHV
LPWRROD]\WRLQVWDOODOOSSSURJUDPVDQGFKHFNKRZDQGZKHUHLVWKHLUVKDULQJ
IROGHUGHILQHGVRLZRXOGSOHDVH\RXWRVKDUH\RXUNQRZOHGJHZLWKPHDOORWKHU
SSVSUHDGHUVLQRWKHUERWVDUHSHDFHRIVKLWFRVWKH\XVHVWDWLFIROGHUQRWWR
PHQWLRQWKHLU
3URJUDP)LOHV
ZKLFKLVRIFRXUVHQDPHG
3URJUDP)LOHV
RQO\RQ
HQJOLVKYHUVLRQRIZLQ”
Case 1:11-mj-00321-AK Document 1-1 Filed 05/12/11 Page 33 of 41
%DVHGRQP\WUDLQLQJDQGH[SHULHQFH,XQGHUVWDQGSKORJANC’s SRVWWREH
VHHNLQJDVVLVWDQFHIURPRWKHU'DUNRGHPHPEHUVDERXWWKHIXQFWLRQDOLW\RIYDULRXV3HHUWR3HHU
VRIWZDUHSURJUDPV%HFDXVHSKORJANC’s ERWQHWVRIWZDUHDWWHPSWVWRVSUHDGLWVHOIWKURXJK
3HHUWR3HHUILOHVKDULQJ6.25-$1&QHHGVWRNQRZWKHPHFKDQLFVRIKRZYDULRXV3HHUWR3HHU
ILOHVKDULQJSURJUDPVIXQFWLRQ,QKLVPHVVDJH6.25-$1&GLVSDUDJHVRWKHUVRIWZDUHWKDW
DWWHPSWVWRVSUHDGWKURXJK3HHUWR3HHUDV“VKLW”EHFDXVHLWVDXWKRUVIDLOWRDFFRXQWIRUWKH
UHJLRQDOGLIIHUHQFHVEHWZHHQGLIIHUHQW:LQGRZVEDVHGFRPSXWHUVZKLFKOLPLWVWKHDELOLW\RI
WKHVHSURJUDPVWRSURSDJDWHWKHPVHOYHV,QUHVSRQVHWRSKORJANC’s PHVVDJHVHYHUDO
PHPEHUVRIWKHIRUXPUHVSRQGHGZLWKDGYLFHDQGVXJJHVWLRQVLQFOXGLQJVDPSOHFRGHWKDW
6.25-$1&FRXOGXVHWRLPSURYHKLVPDOZDUH
$QRWKHUH[DPSOHRIFROODERUDWLRQZLWKLQ'DUNFRGHWDNHVSODFHRQ1RYHPEHU
LQDPHVVDJHWKUHDGHQWLWOHG“FRGHUVPDNLQJ)8'LQMHFWRUVIRU%))” 6.25-$1&SRVWHG
XQGHUWKLVWRSLFWKHIROORZLQJ
,PORRNLQJIRUFRGHUVWKDWOLNHWRGHDOZLWK)8'QHVV8'QHVVSRO\PRUSKLVP
PHWDPRUSKLVP<RXZRXOGEHPDNLQJYDULRXVLQMHFWRUVIRU%))DQGVHOOWKHPWR
%))FXVWRPHUV<RXFDQPDNHVWDQGDUGVWDWLFNLQGRILQMHFWRUVRU
SRO\PRUSKPHWDPRUSKRQHV<RXQDPHWKHSULFH\RXWDNHSD\PHQWVGLUHFWO\
IURPFXVWRPHUV,JLYH\RXH[DPSOHFRGHDQGVSHFLILFDWLRQV\RXQHHGWRIROORZWR
PDNH%))FRPSDWLEOHLQMHFWRU%WZFXVWRPHUVDUHKLJKO\LQWHUHVWHGLQLQMHFWRUV
WKDWZRXOGEH)8'IRUORQJHUWLPHWKDQFXUUHQWFU\SWHUVWKDWFDQEHSXUFKDVHG
RUHYHQVRPHJRRGSRO\PRUSKLFPHWhods etc…contact me if interested.”
RUIZ responded to SKORJANC’s post that he knew of individuals that had the
NQRZOHGJHWRFUHDWHVXFKDSURGXFW
%DVHGRQP\WUDLQLQJDQGH[SHULHQFH,XQGHUVWDQG6.25-$1&’sPHVVDJHWREH
VHHNLQJDVVLVWDQFHIURP'DUNRGHPHPEHUVLQFUHDWLQJDVRIWZDUHSURGXFWWKDWZRXOGDOORZIRU
WKH%XWWHUIO\)ORRGHU%RWWREHXQGHWHFWDEOHWRDQWLYLUXVVRIWZDUH,QRUGHUIRUWKH%XWWHUIO\
Case 1:11-mj-00321-AK Document 1-1 Filed 05/12/11 Page 34 of 41
)ORRGHU%RWWRIXQFWLRQRQDYLFWLPFRPSXWHUWKHERWPXVWQRWEHGHWHFWHGDQGUHPRYHGE\
DQWLYLUXVVRIWZDUH$QWLYLUXVVRIWZDUHGHWHFWVPDOLFLRXVVRIWZDUHE\FRPSDULQJWKHILOHVRQD
FRPSXWHUWRDGDWDEDVHRINQRZQPDOLFLRXVSURJUDPV7KURXJKVRSKLVWLFDWHGSURJUDPPLQJ
WHFKQLTXHVFRGHUVFDQKLGHPDOLFLRXVVRIWZDUHIURPDQWLYLUXVGHWHFWLRQE\FKDQJLQJWKH
malicious program’s signature, thereby rendering the malicious software “8'”XQGHWHFWDEOHWR
PRVWDQWLYLUXVSURGXFWVRU“)8'”IXOO\XQGHWHFWDEOHWRDOODQWLYLUXVSURGXFWV
,QKLVSRVW6.25-$1&RIIHUVWRSURYLGHWKHFRGHWKDWKHGHVLJQHGLQFUHDWLQJ
WKHERWDQGVSHFLILFDWLRQVWKDWZRXOGDOORZIRUWKHDGGRQVRIWZDUHWRIXQFWLRQ7KHPHPEHUV
FUHDWLQJWKHDGGRQVRIWZDUHZRXOGEHDOORZHGWRPDUNHWWKHSURGXFWWRRWKHUPHPEHUVZKR
SXUFKDVHWKH%XWWHUIO\)ORRGHU%RW
,QDVLPLODUYHLQRQ)HEUXDU\D'DUNRGHPHPEHUKHUHDIWHU“0”
SRVWHGDPHVVDJHRQWKHIRUXPXQGHUWKHWRSLF“%HVWERWRQWKHPDUNHW"”,QWKHSRVW0ZURWH
ZK\GRQ
WZHEX\DSULYDWHFXVWRPERWVLPLODUWR%))":HFDQGHWHUPLQHWKH
QHHGVDQGKLUHDSURJUDPPHUWRFRGHLW$OOSHRSOHZKRGDQRWHVSD\VWKH
SURMHFWJHWVWKHFRGH&RGHUPDNHVWKHPDLQEDVHDQGLW
VSOXJLQHQDEOHG6R
HDFKSHUVRQFDQFRGHKLVRZQSOXJLQVIRUWKHLUQHHGV,I\RXGRQ
WZDQWWRXVH,0
VSUHDGLQJ\RXGRQ
WLQVWDOOLWRQ\RXUERWV,I\RXQHHGGGRV\RXZULWH\RXURZQ
FXVWRPSOXJLQDQGORDGLWWR\RXUYLFWLPV&RGHUFRQWLQXHVWRGHYHORSDQG
LPSURYHWKHEDVHRQO\DQGVHQGWKHXSGDWHVVRXUFHUHJXODUO\WRFXVWRPHUV,
WKLQNLIZHFRPELQHDJURXSKHUHZHFDQKLUHDJRRGFRGHU
%DVHGRQP\WUDLQLQJDQGH[SHULHQFH0ZDVVXJJHVWLQJWKHPHPEHUVRIWKH
IRUXPKLUHDQLQGLYLGXDOZKRVSHFLDOL]HVLQVRIWZDUHFRGLQJWRFUHDWHFXVWRPPDOZDUHWKDWKDV
IXQFWLRQVWKDWDUHGHFLGHGXSRQE\WKHJURXS7KHFXVWRPPDOZDUHZRXOGEHGHVLJQHGWRDOORZ
IRUVSHFLILFIXQFWLRQDGGRQVDWDODWHUGDWH,QGLYLGXDOVZKRDUHSDUWRIWKHJURXSZRXOGKDYH
WKHRULJLQDOVRXUFHFRGHRIWKHPDOZDUH%\FRPELQLQJWKHILQDQFLDOUHVRXUFHVRIWKHJURXSD
FRGHUFRXOGEHKLUHGWRFUHDWHWKLVFXVWRPPDOZDUH
Case 1:11-mj-00321-AK Document 1-1 Filed 05/12/11 Page 35 of 41
$QRWKHU'DUNRGHPHPEHUKHUHDIWHU“0”) replied to M1’s post: “FORVHGVRXUFH
ZRXOGEHEHWWHU,WKLQNXQOHVVWKHRQO\FXVWRPHUVDUHOLNHDVPDOOJURXSRISDUWQHUV”0
VXJJHVWHGWKDWWKHPHPEHUVRIWKHJURXSGRQRWKDYHDFFHVVWRWKHRULJLQDOVRXUFHFRGH
'DUNRGHPHPEHUKHUHDIWHU“0”UHSOLHGWR“FRXQWPHLQ”0LVDJUHHLQJLQ
WDNLQJSDUWLQWKHSURMHFW
0WKHQUHSOLHGWR0E\ZULWLQJ
,MXVWQHHGHGWKHVRXUFHIRUIXWXUH,IFRGHUGLHV!SURMHFWGLHV7KHUHPD\EH
WZRRSWLRQVEX\HUJURXSVWRQHMXVWJRWELQDULHVDSD\V;QGRQHJHWV
VRXUFHDQGSD\V;,IFRGHUGLHVVWJURXSPHPEHUVFDQEX\WKHVRXUFHIURP
QGJURXSPHPEHUVMXVWDQLGHD,ISHRSOHZULWHWKHLUQHHGVKHUHZHFDQWU\WR
GHWHUPLQHWKHaEXGJHWZHQHHG7KHJURXSPXVWEHVPDOOJURXSRIWUXVWHG
PHPEHUV3HRSOHZKRKDVFKDQFHWROHDNWKHSURMHFWVKRXOGQ
WEHDFFHSWHGLQWR
WKHJURXS
%DVHGRQP\WUDLQLQJDQGH[SHULHQFH0LVVXJJHVWLQJWKDWWKHUHVKRXOGEHWZR
GLIIHUHQWFDWHJRULHVRIFRGHEX\HUV2QHFDWHJRU\RIPHPEHUVZRXOGEHPHPEHUVZKRSXUFKDVH
RQO\WKHH[HFXWDEOHSURJUDPRIWKHPDOZDUHDQGQRWWKHVRXUFHFRGHWKDWZRXOGDOORZWKHRZQHU
WRIUHHO\UHSOLFDWHRUFKDQJHWKHSURJUDP7KHRWKHUFDWHJRU\ZRXOGEHPHPEHUVZKRSXUFKDVH
WKHVRXUFHFRGHIRUDKLJKHUDPRXQW$PHPEHURIWKHILUVWFDWHJRU\FDQWKHQSD\DQDGGLWLRQDO
DPRXQWIURPPHPEHUVRIWKHRWKHUFDWHJRU\LIWKH\GHVLUHWKHVRXUFHFRGHLQWKHIXWXUH0DOVR
VXJJHVWHGWKDWWKHPHPEHUVRIWKHJURXSPXVWEHWUXVWHG
0UHSOLHGEDFNWR0E\ZULWLQJ“RUMXVWKDYHDJURXSZRUNLQJRQLWWRJHWKHU
VRPHSHRSOHFDQFRGHDQGRWKHUVFDQWHVWVSUHDGLWDQGVWXIIVRHYHQQRWWHFKQLFDOSSOFDQ
FRQWULEXWH”
%DVHGRQP\WUDLQLQJDQGH[SHULHQFH0LVVXJJHVWLQJWKDWDJURXSRILQGLYLGXDOV
FRXOGGHVLJQWKHFXVWRPPDOZDUH,QGLYLGXDOVZKRODFNWKHH[SHUWLVHLQFUHDWLQJFRGHZRXOGEH
Case 1:11-mj-00321-AK Document 1-1 Filed 05/12/11 Page 36 of 41
DEOHWRWHVWWKHSURGXFWFUHDWHGE\WKHFRGHUV,QWKLVZD\LQGLYLGXDOVZKRODFNWKHFRGLQJ
H[SHUWLVHFRXOGFRQWULEXWH
7KLVWRSLFLOOXVWUDWHVWKDWWKHPHPEHUVRI'DUNRGHZRUNFORVHO\WRJHWKHUXVLQJ
WKHVSHFLDOL]HGVNLOOVRIHDFKPHPEHULQRUGHUWRIXUWKHUDQGIDFLOLWDWHWKHFULPLQDODFWLYLWLHVRI
LWVPHPEHUV
7KHPHPEHUVRI'DUNRGHDOVRSURYLGHLQIRUPDWLRQDQGPHWKRGVWRHDFKRWKHULQ
RUGHUWRHYDGHGHWHFWLRQE\ODZHQIRUFHPHQW2Q$XJXVWD'DUNRGHPHPEHUKHUHDIWHU
“0”SRVWHGWRWKHWRSLF“,QVWDQWPHVVDJLQJHQFU\SWLRQ”0ZURWH
0DQ\SHRSOHGLVFXVVQRWVROHJDOVWXIIRYHU,QVWDQW0HVVHQJHUVZKLFKFDQEHVHHQ
in plain text. The most don’t give a fuck and tease the faith. What about you?
0\RSLRQWKDWLWVKRXOGEHDPXVWXVLQJ6,03IHWRHQFU\SW\RXU,0WUDIILFDQG
keep your conversation in privacy on such kind of forums. Just in case…to do not
WHDVHWKHIDLWK36ZRXOGEHJRRGLIDOOWKHSHRSOHIURPWKLVIRUXP,KDYHRQP\
061OLVWJRW6,03RUDQ\RWKHUUHODWLYHWRRO
%DVHGRQP\WUDLQLQJDQGH[SHULHQFH,XQGHUVWDQG0WREHDVNLQJWKHPHPEHUV
RI'DUNRGHWRGHVFULEHWKHLUPHWKRGVRINHHSLQJODZHQIRUFHPHQWIURPLQWHUFHSWLQJDQGUHDGLQJ
WKHLURQOLQHFRPPXQLFDWLRQV,QKLVPHVVDJH0UHIHUHQFHVXVLQJWKHSURJUDP“6,03”WR
HQFU\SWWKHFRPPXQLFDWLRQEHLQJWUDQVIHUUHGRYHUWKH,QWHUQHW2SHQVRXUFHUHVHDUFKFRQILUPV
WKDW6,03LVDSURJUDPFDSDEOHRIHQFU\SWLQJLQVWDQWPHVVDJHWUDIILF
$'DUNRGHPHPEHUKHUHDIWHU“0”) replied to M4’s post thaWKHXVHV6,03
+RZHYHU0DOVRVWDWHGWKDW6,03LVQRWHIIHFWLYHLIWKHRWKHUSHUVRQLQWKHFRPPXQLFDWLRQLV
QRWXVLQJWKHSURJUDP
$QRWKHU'DUNRGHPHPEHUKHUHDIWHU“0”ZURWHWKDWKHXVHVHQFU\SWLRQLQRUGHU
WRSURWHFWKLV0610HVVHQJHUORJV
6.25-$1&IROORZHG0SRVWE\ZULWLQJ
Case 1:11-mj-00321-AK Document 1-1 Filed 05/12/11 Page 37 of 41
QRWNHHSLQJPVQORJVLVPRUHLPSRUWDQW:LWKRXWSURRIRQ\RXU+'WKH\KDYH
QRWKLQJ
,QDGGLWLRQWRIDFLOLWDWLQJWKHH[FKDQJHRILGHDVNQRZOHGJHDQGDGYLFH'DUNRGH
DOVRIXQFWLRQVDVDWLJKWO\FRQWUROOHGPDUNHWSODFHIRUEX\HUVDQGVHOOHUVHQJDJHGLQFULPLQDO
DFWLYLW\2Q-XQHD'DUNRGHPHPEHUKHUHDIWHU“0”SRVWHGDPHVVDJHXQGHUWKH
IRUXPWKUHDG“%)%273UR”0ZURWH
,am putting this up again because last time the buyer didn’t went through, there
IRUH,VWLOOKDYHWKHERW,WFRPHVZLWKWKHGRPDLQVDQGULJKWQRZLWKDV
ERWVRQOLQH3ULFHWRGD\GLVFXVVDEOH3D\PHQWYLD/5:0=)RUJRWWR
PHQWLRQLWFRPHVZLWKDKDFNHGRIIVKRUHVHUYHUEHHQXVLQJLWIRUPRQWKVDQG
PRQWKV8QIRUWXQDWHO\,am in a rush to make a quick buck, and since I haven’t
EHHQXVLQJ%)%RWIRUTXLWHVRPHWLPH,ZLOOOHWLWJRIRUULJKWQRZ”
%DVHGRQP\WUDLQLQJDQGH[SHULHQFHI understand M7’s message to be
DGYHUWL]LQJWKHVDOHRIDERWQHWFRQVLVWLQJRIYLFWLPFRPSXWHUV7KHSULFHRIWKHERWQHWZDV
DQGSD\PHQWZDVEHLQJDFFHSWHGXVLQJYDULRXVIRUPVRIRQOLQHSD\PHQWRSWLRQV7KH
YLFWLPFRPSXWHUVZHUHEHLQJFRQWUROOHGE\DFRPPDQGDQGFRQWUROVHUYHURIZKLFKDFFHVVZDV
JDLQHGE\KDFNLQJ0ZLOOVHOOWKHVHUYHUIRU7KHPHPEHUSXUFKDVLQJWKLVSDFNDJHZRXOG
EHDEOHWRXVHWKHFDSDELOLWLHVRIWKHPDOZDUHWRIXUWKHUWKHLUFULPLQDODFWLYLW\
7KH'DUNRGHIRUXPLVDWUDQVQDWLRQDOFULPLQDOHQWHUSULVH,WVVWUXFWXUHGLYLVLRQRI
ODERUVXSSRUWQHWZRUNDQGits members’ participation in various criminal activities in countries
WKURXJKRXWWKHZRUOGIDFLOLWDWHWKHH[FKDQJHRILGHDVNQRZOHGJHDQGDGYLFHDQGSURYLGHD
WLJKWO\FRQWUROOHGPDUNHWSODFHIRUEX\HUVDQGVHOOHUVHQJDJHGLQFULPLQDODFWLYLW\
7KHIDFWVDQGFLUFXPVWDQFHVVHWIRUWKLQWKLVDIILGDYLWGHPRQVWUDWHWKDWWKHUHLV
SUREDEOHFDXVHWREHOLHYHWKDW0$7-$=6.25-$1&DND“LVHUGR”DND“VHUGR”
)/25(1&,2&$55258,=DND“1H7.”DND“1HWNDLUR”DQG0(1725/(1,4,DND
Case 1:11-mj-00321-AK Document 1-1 Filed 05/12/11 Page 38 of 41
“,FHPDQ”YLRODWHGIHGHUDOODZLQFOXGLQJYLRODWLRQVRI7LWOH8QLWHG6WDWHV&RGH6HFWLRQ
G5DFNHWHHULQJ&RQVSLUDF\7LWOH8QLWHG6WDWHV&RGH6HFWLRQ&RQVSLUDF\WR
FRPPLWZLUHIUDXGDQGEDQNIUDXG7LWOH8QLWHG6WDWHV&RGH6HFWLRQ&RQVSLUDF\WR
FRPPLWFRPSXWHUFULPHVDFFHVVGHYLFHIUDXGDQGH[WRUWLRQDQG7LWOH8QLWHG6WDWHV&RGH
6HFWLRQD$)UDXGDQGUHODWHGDFWLYLW\LQFRQQHFWLRQZLWKFRPSXWHUV
)25)(,785($//(*$7,216
3XUVXDQWWR5XOHD)HGHUDO5XOHVRI&ULPLQDO3URFHGXUHQRWLFHLVKHUHE\JLYHQWR
WKHGHIHQGDQWVWKDWWKH8QLWHG6WDWHVZLOOVHHNIRUIHLWXUHDVSDUWRIDQ\VHQWHQFHLQDFFRUGDQFH
with Title 18, United States Code, Sections 1963 and 982, in the event of any defendant’s
FRQYLFWLRQVXQGHUHLWKHU&RXQWRU
5$&.(7((5,1*)25)(,785(
3XUVXDQWWR7LWOH8QLWHG6WDWHV&RGH6HFWLRQDHDFKGHIHQGDQWZKRLV
FRQYLFWHGRIWKHRIIHQVHVHWIRUWKLQ&RXQWRIWKLV,QGLFWPHQWVKDOOIRUIHLWWRWKH8QLWHG6WDWHV
WKHIROORZLQJSURSHUW\
D
$Q\LQWHUHVWDFTXLUHGRUPDLQWDLQHGSXUVXDQWWR6HFWLRQ
E
$Q\LQWHUHVWLQVHFXULW\RIFODLPDJDLQVWRUSURSHUW\RUFRQWUDFWXDOULJKWV
RIDQ\NLQGDIIRUGLQJDVRXUFHRILQIOXHQFHRYHUWKHHQWHUSULVHGHVFULEHGLQ&RXQWZKLFKZDV
HVWDEOLVKHGRSHUDWHGFRQWUROOHGDQGFRQGXFWHGSXUVXDQWWR7LWOH8QLWHG6WDWHV&RGH6HFWLRQ
F
$Q\SURSHUW\FRQVWLWXWLQJRUGHULYHGIURPSURFHHGVREWDLQHGGLUHFWO\DQG
LQGLUHFWO\IURPUDFNHWHHULQJDFWLYLW\SXUVXDQWWR7LWOH8QLWHG6WDWHV&RGH6HFWLRQ
Case 1:11-mj-00321-AK Document 1-1 Filed 05/12/11 Page 39 of 41
G
7KHSURSHUW\VXEMHFWWRIRUIHLWXUHVKDOOLQFOXGHEXWQRWEHOLPLWHGWRWKH
L
IROORZLQJ
$VXPRIPRQH\UHSUHVHQWLQJWKHWRWDODPRXQWRISURFHHGV
REWDLQHGE\GHIHQGDQWVDVDUHVXOWRIWKHLUYLRODWLRQRI7LWOH8QLWHG6WDWHV&RGH6HFWLRQ
DQG
LL
3URSHUW\ORFDWHGDW
0DULERU6ORYHQLD
DQGVWRUDJHURRP(/DQG5HJLVWHU1XPEHU2NUDMQR6RGLVFHY0DULERU
/RFDO&RXUW0DULERU
,IPRUHWKDQRQHGHIHQGDQWLVFRQYLFWHGRI&RXQWWKHGHIHQGDQWVVRFRQYLFWHG
DUHMRLQWO\DQGVHYHUDOO\OLDEOHIRUWKHDPRXQWVXEMHFWWRIRUIHLWXUHXQGHUWKLVSDUDJUDSK
$OOSXUVXDQWWR7LWOH8QLWHG6WDWHV&RGH6HFWLRQ
:,5()5$8')25)(,785(
3XUVXDQWWRWKHSURYLVLRQVRI7LWOH8QLWHG6WDWHV&RGH6HFWLRQDQG7LWOH
8QLWHG6WDWHV&RGH6HFWLRQD&HDFKGHIHQGDQWZKRLVFRQYLFWHGRIWKHRIIHQVHVHW
IRUWKLQ&RXQW:LUH)UDXG&RQVSLUDF\VKDOOIRUIHLWWRWKH8QLWHG6WDWHVWKHIROORZLQJ
SURSHUW\
$Q\SURSHUW\FRQVWLWXWLQJRUGHULYHGIURPSURFHHGVWKHGHIHQGDQWVREWDLQHGDVWKHUHVXOW
RIVXFKYLRODWLRQ
D
7KHSURSHUW\VXEMHFWWRIRUIHLWXUHVKDOOLQFOXGHEXWQRWEHOLPLWHGWRWKH
IROORZLQJ
Case 1:11-mj-00321-AK Document 1-1 Filed 05/12/11 Page 40 of 41
L
$VXPRIPRQH\UHSUHVHQWLQJWKHWRWDODPRXQWRISURFHHGV
REWDLQHGE\GHIHQGDQWVDVDUHVXOWRIWKHLUYLRODWLRQVRI7LWOH8QLWHG6WDWHV&RGH6HFWLRQ
DQG
LL
3URSHUW\ORFDWHGDW
0DULERU6ORYHQLD
DQGVWRUDJHURRP(/DQG5HJLVWHU1XPEHU2NUDMQR6RGLVFHY0DULERU
/RFDO&RXUW0DULERU
$OOSXUVXDQWWRWKHSURYLVLRQVRI7LWOH8QLWHG6WDWHV&RGH6HFWLRQDQG7LWOH
8QLWHG6WDWHV&RGH6HFWLRQD&
Case 1:11-mj-00321-AK Document 1-1 Filed 05/12/11 Page 41 of 41
68%67,787(3523(57<
,IDQ\RIWKHSURSHUW\GHVFULEHGDERYHDVEHLQJVXEMHFWWRIRUIHLWXUHDVDUHVXOWRI
DQ\DFWRURPLVVLRQRIWKHGHIHQGDQWV
D
FDQQRWEHORFDWHGXSRQWKHH[HUFLVHRIGXHGLOLJHQFH
E
KDVEHHQWUDQVIHUUHGRUVROGWRRUGHSRVLWHGZLWKDWKLUGSDUW\
F
KDVEHHQSODFHGEH\RQGWKHMXULVGLFWLRQRIWKHFRXUW
G
KDVVXEVWDQWLDOO\GLPLQLVKHGLQYDOXHRU
H
KDVEHHQFRPPLQJOHGZLWKRWKHUSURSHUW\ZKLFKFDQQRWEHGLYLGHG
ZLWKRXWGLIILFXOW\
LWLVWKHLQWHQWRIWKH8QLWHG6WDWHVSXUVXDQWWR7LWOH8QLWHG6WDWHV&RGH6HFWLRQP
WKHSURFHGXUHVRI7LWOH8QLWHG6WDWHV&RGH6HFWLRQSDQG5XOH)HG5&ULP3
WRVHHNIRUIHLWXUHRIDQ\RWKHUSURSHUW\RIVDLGGHIHQGDQWVXSWRWKHYDOXHRIWKHIRUIHLWDEOH
SURSHUW\GHVFULEHGDERYH
BBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBB
'DQLHO6:LHU]ELFNL
6SHFLDO$JHQW
)HGHUDO%XUHDXRI,QYHVWLJDWLRQ
6XEVFULEHGDQGVZRUQWREHIRUHPHWKLVBBBBBBBBGD\RI0D\
BBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBB
+21$/$1.$<
81,7('67$7(60$*,675$7(-8'*(
© Copyright 2026 Paperzz