Thursday, February 27, 2025
HomeCyber Security NewsNGINX Office Raided by Russian Police - Co-Founders and Employees Detained

NGINX Office Raided by Russian Police – Co-Founders and Employees Detained

Published on

SIEM as a Service

Follow Us on Google News

Russian police have raided the Nginx office at Moscow, detained the employees of the company, the original developer Igor Sysoev, and another co-founder Maxim Konovalov.

The searches are due to complaints filed by Rambler Group against NGINX. Rambler claims that Sysoev developed the open-source Nginx web server when he was working as a system administrator in Rambler.

Nginx Office Raided

Nginx webserver was publicly released in the year 2004, it is free open-source software and can be also used as a reverse proxy or load balancer. The latest stable version is Nginx 1.16.1.

Igor Sysoev said that he developed Nginx “aiming to overcome certain barriers of scaling the web infrastructure difficulties in handling many concurrent connections, reducing latency and offloading static content, SSL and persistent connections.”

Nginx, Inc was formed in the year 2011, aimed to provide support and for supplying Nginx plus paid software. In 2019 NGINX was acquired by F5 Networks for $670 million. According to the w3techs report, Nginx is used by more than 30% of the websites including gainst like Facebook, Netflix and Apple.

Rambler group claims that Igor Sysoev started the development of NGINX when he was an employee in Rambler Internet Holding company, so “therefore any use of this program without the consent of the Rambler Group is a violation of the exclusive right.”

Igor Sysoev said in an Interviews at Hacker magazine in 2012 that he developed NGINX in free hours while working in Rambler, he also told that “programming was not part of my job responsibilities in Rambler.”

Rambler also claimed that Sysoev worked on the Nginx project during working hours, then he distributed the web server software on the Internet freely, later the rights owned by Nginx Inc. Rambler said, this agreement and free distribution is illegal and it costs damage estimated at 51.4 million rubles ($820,000).

According to the Forbes report the case has been failed under Part 3 of Article 146, which leads to 6 years of imprisonment, with fines up to 500,000 rubles.

You can follow us on LinkedinTwitterFacebook for daily Cybersecurity and hacking news updates

Gurubaran
Gurubaran
Gurubaran is a co-founder of Cyber Security News and GBHackers On Security. He has 10+ years of experience as a Security Consultant, Editor, and Analyst in cybersecurity, technology, and communications.

Latest articles

Silver Fox APT Hackers Target Healthcare Services to Steal Sensitive Data

A sophisticated cyber campaign orchestrated by the Chinese Advanced Persistent Threat (APT) group, Silver...

Ghostwriter Malware Targets Government Organizations with Weaponized XLS File

A new wave of cyberattacks attributed to the Ghostwriter Advanced Persistent Threat (APT) group...

LCRYX Ransomware Attacks Windows Machines by Blocking Registry Editor and Task Manager

The LCRYX ransomware, a malicious VBScript-based threat, has re-emerged in February 2025 after its...

Threat Actors Using Ephemeral Port 60102 for Covert Malware Communications

Recent cybersecurity investigations have uncovered a sophisticated technique employed by threat actors to evade...

Supply Chain Attack Prevention

Free Webinar - Supply Chain Attack Prevention

Recent attacks like Polyfill[.]io show how compromised third-party components become backdoors for hackers. PCI DSS 4.0’s Requirement 6.4.3 mandates stricter browser script controls, while Requirement 12.8 focuses on securing third-party providers.

Join Vivekanand Gopalan (VP of Products – Indusface) and Phani Deepak Akella (VP of Marketing – Indusface) as they break down these compliance requirements and share strategies to protect your applications from supply chain attacks.

Discussion points

Meeting PCI DSS 4.0 mandates.
Blocking malicious components and unauthorized JavaScript execution.
PIdentifying attack surfaces from third-party dependencies.
Preventing man-in-the-browser attacks with proactive monitoring.

More like this

Silver Fox APT Hackers Target Healthcare Services to Steal Sensitive Data

A sophisticated cyber campaign orchestrated by the Chinese Advanced Persistent Threat (APT) group, Silver...

Ghostwriter Malware Targets Government Organizations with Weaponized XLS File

A new wave of cyberattacks attributed to the Ghostwriter Advanced Persistent Threat (APT) group...

LCRYX Ransomware Attacks Windows Machines by Blocking Registry Editor and Task Manager

The LCRYX ransomware, a malicious VBScript-based threat, has re-emerged in February 2025 after its...