{"id":54309,"date":"2025-10-22T19:33:59","date_gmt":"2025-10-22T19:33:59","guid":{"rendered":"https:\/\/dogewisperer.com\/?p=54309"},"modified":"2025-10-22T19:33:59","modified_gmt":"2025-10-22T19:33:59","slug":"cryptojacking-scandal-ex-digital-river-worker-exploited-company-systems-for-personal-ethereum-gains","status":"publish","type":"post","link":"https:\/\/dogewisperer.com\/?p=54309","title":{"rendered":"Cryptojacking Scandal: Ex-Digital River Worker Exploited Company Systems for Personal Ethereum Gains"},"content":{"rendered":"<div>\n<p>A former Digital River employee has been ordered to pay more than $45,000 back to his previous employer after unlawfully using company computing systems to mine cryptocurrency.<\/p>\n<p>Joshua Paul Armbrust, 45, was sentenced Tuesday to three years\u2019 probation by US District Judge Jerry Blackwell, following his April guilty plea to a felony computer fraud charge.<\/p>\n<h2>Armbrust\u2019s Covert Mining Scheme Exposed<\/h2>\n<p>According to court filings, Armbrust <a href=\"https:\/\/www.duluthnewstribune.com\/news\/local\/former-northland-man-sentenced-for-cryptojacking-scheme\">continued<\/a> exploiting Digital River\u2019s resources for over a year after leaving the Minnetonka-based e-commerce and payment processing firm in February 2020. He mined Ethereum using the company Amazon Web Services (AWS) credentials, which fetched him an earnings of $5,895 while incurring $45,270 in costs to Digital River.<\/p>\n<p>The activity was uncovered during an internal investigation by Digital River, which shut down operations in January. Reviewers noticed unusual AWS fees and traced the activity to Armbrust\u2019s IP address. This revealed that he had consistently run mining scripts on company servers between 6 p.m. and 7 a.m., long after his departure.<\/p>\n<p>Assistant US Attorney Jordan Endicott said that it was \u201cnot a momentary lapse in judgment\u201d but a \u201ccalculated and covert misuse of enterprise-level computing resources for private enrichment.\u201d<\/p>\n<blockquote>\n<p>\u201cThe defendant\u2019s conduct strikes at the core of digital trust and security in the modern economy. Companies rely on former employees to act ethically, even after separation, and to respect corporate systems and data. Unauthorized access to corporate cloud infrastructure not only creates financial harm, as in this case, but also exposes sensitive systems to potential compromise and opens the door to more severe cyber threats.\u201d<\/p>\n<\/blockquote>\n<h2>Desperate or Calculated?<\/h2>\n<p>Defense attorney William Mauzy described Armbrust\u2019s conduct as driven by desperation rather than greed. Mauzy said Armbrust faced severe financial pressure while caring for his terminally ill mother, who has since passed. He added that Armbrust did not attempt to damage systems, hide his actions, and accepted responsibility for losses.<\/p>\n<p>At the time of his indictment in November 2024, Armbrust was living in Orr, Minnesota. He has since moved to St. Paul, where he now works in the insurance sector. Both the prosecution and defense recommended a probation sentence under the plea deal, citing his clean record and cooperation with authorities.<\/p>\n<p>Judge Blackwell remarked that Armbrust\u2019s technical talents could have been applied lawfully, pointing to the wasted potential. The outcome underscores the need for companies to secure access to computing resources and prevent long-term misuse by former employees.<\/p>\n<p>Cryptojacking, also called malicious cryptomining, still <a href=\"https:\/\/cryptopotato.com\/cryptojacking-attacks-skyrocketed-by-400-in-h1-2023-sonicwall-report\/\">remains<\/a> a critical threat vector. It\u2019s a cyber threat where hackers secretly use a computer or mobile device to mine cryptocurrency. Before its shutdown in March 2019, Coinhive was a widely <a href=\"https:\/\/cryptopotato.com\/cryptojacking-attempts-surge-in-q2-2020-as-bitcoin-price-increases\/\">used<\/a> cryptojacking tool and was estimated to be involved in more than two-thirds of all such attacks.<\/p>\n<p>The post <a href=\"https:\/\/cryptopotato.com\/cryptojacking-scandal-ex-digital-river-worker-exploited-company-systems-for-personal-ethereum-gains\/\">Cryptojacking Scandal: Ex-Digital River Worker Exploited Company Systems for Personal Ethereum Gains<\/a> appeared first on <a href=\"https:\/\/cryptopotato.com\/\" rel=\"nofollow\">CryptoPotato<\/a>.<\/p>\n<\/div>\n","protected":false},"excerpt":{"rendered":"<p>A former Digital River employee has been ordered to pay more than $45,000 back to his previous employer after unlawfully using company computing systems to mine cryptocurrency. Joshua Paul Armbrust, 45, was sentenced Tuesday to three years\u2019 probation by US District Judge Jerry Blackwell, following his April guilty plea to a felony computer fraud charge. [&hellip;]<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"iawp_total_views":0,"footnotes":""},"categories":[2],"tags":[3,4,5],"class_list":["post-54309","post","type-post","status-publish","format-standard","hentry","category-news","tag-crypto","tag-doge","tag-news"],"_links":{"self":[{"href":"https:\/\/dogewisperer.com\/index.php?rest_route=\/wp\/v2\/posts\/54309","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/dogewisperer.com\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/dogewisperer.com\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/dogewisperer.com\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/dogewisperer.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=54309"}],"version-history":[{"count":0,"href":"https:\/\/dogewisperer.com\/index.php?rest_route=\/wp\/v2\/posts\/54309\/revisions"}],"wp:attachment":[{"href":"https:\/\/dogewisperer.com\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=54309"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/dogewisperer.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=54309"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/dogewisperer.com\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=54309"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}