The Battle for the Booty: Corporate Giants Sue for Seized Qakbot Millions

United States federal authorities are persisting in the civil forfeiture proceedings concerning assets seized during the investigation into the Qakbot cybercriminal infrastructure. The litigation, initiated in May 2025, is currently being adjudicated by the District Court of California.

The assets in question exceed $2 million, comprising a mixture of physical currency and diverse cryptocurrencies, including Bitcoin and various stablecoins. These funds were frozen across multiple exchanges and financial accounts throughout the inquiry and are presently held in the custody of the FBI under judicial mandate.

A plurality of entities, including Dish Network, Concord Music Group, and Minto Holdings, have asserted claims to the sequestered funds. These organizations maintain that the assets rightfully belong to them and have formally requested a trial by jury to resolve the matter.

According to government assertions, the confiscated wealth is linked to a key defendant—the alleged coordinator of the cybercriminal architecture that utilized Qakbot to disseminate malware and secure unauthorized entry into corporate environments. The investigation further encompasses instances involving the deployment of ransomware.

The U.S. Department of Justice emphasizes that the ultimate objective of this forfeiture is the restitution of funds to the victims. Nevertheless, the competing claims have significantly protracted the legal process; the court has repeatedly deferred hearings to accommodate the submission of supplementary petitions.

The next judicial proceeding is scheduled for January 30, 2026. Prior to this date, the parties are compelled to submit a joint status report detailing their progress in notifying potential claimants and the status of negotiations regarding the validity of the asserted demands.