He is the accused mastermind of one of the biggest hacks ever. He and his crew allegedly pilfered information from more than 80 million JPMorgan Chase & Co clients and ran online gambling, stock manipulation and money-laundering schemes around the world.
Gery Shalon, charged with those crimes four years ago, has rarely appeared in court since he was extradited to the US. Now it is clear why: Shalon is helping US authorities, people familiar with the matter said.
Such cooperation could result in anything from a lighter sentence to outright release. That would be a remarkable turnabout for a man whom then-US attorney general Loretta Lynch accused of netting hundreds of millions of US dollars from “one of the largest thefts of financial-related data in history.”
Illustration: Mountain People
Because authorities singled out Shalon as the brazen scheme’s leader, he would have to deliver something important to chip away at his 23 counts, several of them carrying potential 20-year prison terms.
While the precise nature of his cooperation is not clear, Shalon intersected with worlds that later came under the glare of some of US history’s most politically charged investigations.
An Israeli citizen, he allegedly teamed up with a Russian hacker who is now also in US custody, raising the prospect that Shalon could provide US prosecutors with a road map to Russian cybercrimes, how criminal hackers interact with that nation’s intelligence services, or both.
Other alleged Russian cybercriminals have been brought to the US and charged, among them potential cooperators.
Judging by the range of activities outlined in Shalon’s indictment, he might also be able to act as a guide into criminal spheres such as international money laundering.
A release of Shalon would be “pretty extreme,” said Rebecca Roiphe, a professor at New York Law School and former Manhattan prosecutor who is not involved in the case. “He must be giving up somebody who is far more culpable than him, either in this crime or in a coordinated crime, to get that deal.”
If he is cooperating, “there may be something coming down the road that will answer this riddle,” she added.
A spokesman for the US attorney’s office in Manhattan declined to comment.
A lawyer for Shalon did not respond to requests for comment.
The prospect of a light sentence for Shalon was raised recently by his father, Shota Shalelashvili, a lawmaker in the Republic of Georgia.
In an interview on Georgian television last month, Shalelashvili hinted that his son could soon be released from US custody after explaining how he carried out the hack and repaying “millions” in stolen money.
Shalon has been allowed to remove his home monitoring device, his father told Georgian television, indicating he was at some point allowed to move from jail to home confinement.
Shalelashvili did not respond to requests to comment about the TV report.
Shalon’s alleged hacking conspiracy had tentacles across a wide swath of the global financial system and encompassed identity theft, pump-and-dump frauds, illegal Internet casinos and money transfers via an illegal cryptocurrency exchange. Victims of the hack included Fidelity Investments, E-Trade Financial Corp and Dow Jones & Co.
The breach of sensitive systems inside JPMorgan was so vast that US intelligence officials initially feared there might be a connection to Russian spy agencies, and they provided the FBI with evidence of possible links, according to a US law enforcement official.
Ultimately, the FBI said the endeavor was purely criminal.
At a minimum, authorities might enlist Shalon to explain how his crew and other hackers managed to launder hundreds of millions of dollars, which could help them track the vast money trail of modern-day cybertheft.
Prosecutors could also have put Shalon back online, as they have in other hacking cases, using him as a guide through the criminal underground and perhaps even luring other cybercriminals into US grasp.
In his interview with Georgia’s Rustavi 2 television channel, Shalelashvili said his son could be allowed to present financial guarantees that could let him leave the US.
“He may be found guilty — but not to the extent that may have been expected,’’ the father said.
Shalelashvili, 59, was born in the then-Soviet republic of Georgia and moved as a young man to Israel, where he raised his family. He now has Georgian, Russian and Israeli citizenship, and has said in previous interviews that he made much of his fortune doing business in Russia and Africa.
In 2014, Shalelashvili made a run at buying Georgia’s Cartu Bank from billionaire Bidzina Ivanishvili for US$270 million. Ivanishvili, a former Georgian prime minister, pulled out of the deal.
Shalon was arrested in July 2015 at his home in a Tel Aviv suburb. He was extradited to the US in 2016. That same year, his father returned to Georgia and gained a seat in parliament as a member of Ivanishvili’s party, Georgian Dream, which currently holds the majority.
Shalon had US$100 million stashed in Swiss bank accounts at the time of his arrest, US officials said.
He and his main codefendants agreed to a series of deals repatriating money stashed in bank accounts in Switzerland, Georgia, Cyprus, Luxembourg and Latvia.
US authorities also asked Georgian officials to seize Georgian accounts held by Shalelashvili, according to the television report.
Shalelashvili told the TV interviewer that Georgian authorities misidentified money in his accounts as belonging to his son and later released it.
The office of Georgia’s prosecutor declined to comment.
In all, Shalon agreed to surrender US$403 million in 2017 as part of the case, Israel’s Calcalist newspaper reported, citing court documents it reviewed.
Many of the documents in Shalon’s case file in Manhattan federal court remain sealed.
As several of Shalon’s alleged co-conspirators pleaded guilty or were tried and convicted, Shalon quietly idled in the US legal system. Public hearings have been repeatedly postponed. The long delays and silence are typical when a defendant turns into a cooperator.
All the while, a key alleged fellow conspirator remained at large — an unidentified, Russian-speaking hacker who authorities said had hands on the keyboard to penetrate networks for Shalon’s ring.
Then, in September last year, federal prosecutors heralded a “significant milestone’’ in their case: The JPMorgan hacker, whom they identified as Andrei Tyurin of Russia, had been arrested in the Republic of Georgia and extradited to the US.
The US and Georgia do not have a formal extradition treaty, but they have had a general law enforcement cooperation agreement for nearly two decades. How and why Tyurin wound up in Georgia remains unclear.
Georgian authorities said he was arrested entering the country through Tbilisi International Airport and said he was unaware that he was a wanted man.
For US officials, Tyurin could help illuminate the links between Russia’s cybercriminals and its spy agencies. During the JPMorgan investigation, US intelligence agencies presented the FBI with evidence that Russia had tried to recruit the hacker, who was initially referred to in the indictment as co-conspirator 1.
According to Georgian authorities, Moscow mounted an unsuccessful bid to have Tyurin returned to Russia.
Tyurin appeared at a hearing immediately upon arriving in the US and again a few weeks later. Subsequent hearings in his case have been postponed, like those for Shalon over earlier years.
A lawyer for Tyurin did not respond to a request for comment.
Shalelashvili, in an interview with Bloomberg, said he was aware of Tyurin’s arrest in Georgia, but had no knowledge of how it came about.
French firm DCI-DESCO in April won a bid to upgrade Taiwan’s Lafayette frigates, which has strained ties between China and France. In 1991, France sold Taiwan six Lafayette frigates and in 1992 sold it 60 Mirage 2000 fighter jets. To prevent arms sales between the nations, China negotiated an agreement with France and in 1994 in a joint statement, France promised that there would be no future arms sales to Taiwan. From China’s point of view, the DCI-DESCO deal constitutes a breach of the agreement, but the French stance is that it is not selling Taiwan new weapons, but instead providing a
Chung Yuan ChristiaN University is clearly in bed with the People’s Republic of China. This can be the only explanation why the school’s authorities have done their utmost to shield a student, who lodged a complaint against an associate professor, and then used thuggish tactics to compel the teacher to issue two separate apologies to China. The original complaint, filed by an unnamed Chinese student, was for remarks by associate professor Chao Ming-wei (招名威) during a class on the origin of COVID-19. A second complaint was filed by the same student after Chao, during an apology, stated that he was a
President Tsai Ing-wen (蔡英文) in her inaugural address on May 20 firmly said: “We will not accept the Beijing authorities’ use of ‘one country, two systems’ to downgrade Taiwan and undermine the cross-strait status quo.” The Chinese government was not too happy, and later that day, an opinion piece on the Web site of China’s state broadcaster China Central Television said: “While Tsai’s first inaugural address four years ago was read by Beijing as an ‘unfinished answer sheet,’ the one she presented this time was even more below-par.” Speaking to the China Review News Agency, Shanghai Institutes for International Studies vice president
During my twenty-two years in the US Senate, I became a student of Taiwan and its history. I was chairman of the Senate Foreign Relations Subcommittee on East Asia, the Pacific and International Cybersecurity Policy, and have made at least 25 trips to Taiwan and have been invited as an observer to two of the nation’s presidential elections. Taiwan’s continuous economic miracle has seen the nation transition from a mixed agricultural-industrial society at the end of Japan’s 50 years of jurisdiction to today’s economic powerhouse, unmatched by most nations of the world. Just as outstanding has been Taiwan’s decades of resistance and