Morgan Culbertson, Dendroid Malware Distribution, Pennsylvania 2023

Morgan Culbertson, 22, of Pittsburgh, Pa., is walking free — but under a federal leash — after being sentenced to three years’ probation for unleashing Dendroid, a malicious software toolkit designed to hijack Android phones. The Allegheny County resident, known online as “Android,” created and sold the malware on the notorious hacking forum Darkode, giving criminals remote access to victims’ devices, federal prosecutors confirmed.

U.S. District Judge Arthur J. Schwab handed down the sentence, which includes 300 hours of community service and strict computer monitoring, marking the end of a case that exposed the underground economy of mobile malware. Culbertson didn’t pull a trigger or break into a bank, but his digital weaponization of smartphones enabled theft of personal data, camera access, and silent surveillance — all from behind a keyboard.

Culbertson’s malware, Dendroid, was marketed as a turnkey solution for hackers with little technical skill. Once installed on a victim’s phone — often through phishing or disguised apps — it gave attackers full control. Text messages, call logs, GPS locations, and private photos were all up for grabs. The malware was even advertised with customer support and updates, treating cybercrime like a SaaS startup.

The Darkode forum, where Culbertson operated under his alias, served as a black-market bazaar for hackers to trade tools, data, and exploits. Law enforcement shut it down in a sweeping 2015 operation, but not before Culbertson had already profited from his malicious code. His role wasn’t just that of a developer — he was a conspirator, actively aiding others in deploying Dendroid against unsuspecting users.

Assistant United States Attorney James T. Kitchen led the prosecution, building a case that traced Culbertson’s digital fingerprints across encrypted channels and transaction logs. While no dollar amount tied to the sales was disclosed, the damage potential of Dendroid put it squarely in the crosshairs of the FBI’s cyber division, which conducted the investigation.

Acting United States Attorney Soo C. Song praised the FBI’s work in dismantling Culbertson’s operation, calling it a warning to cybercriminals hiding in online forums. “Selling malware isn’t victimless tech tinkering — it fuels real-world theft and invasion,” Song said. “This sentence holds him accountable without prison, but under watch — and that scrutiny may be the real punishment in his world.”

MORE FEDERAL CRIME NEWS

Cybercrime

Sean Andrew Duncan, Obstruction of Terrorism Investigation, Virginia 2016

Feb 6, 2018

Cybercrime

Ki Cheung Yau, Cyberstalking, Minnesota 2024

Nov 17, 2021

Cybercrime

Tristan Simpson Brennand, Ecstasy Trafficking, Washington 2023

Oct 28, 2016

Cybercrime

Willie Dennis, Cyberstalking, New York 2023

Nov 16, 2020