How Russian miners built a mobile crypto farm and got busted

What did the crypto extraction on wheels and how did the Russian authorities discover it?
A mobile cryptocurrency mining operation implies the installation of extraction equipment, such as integrated circuits specific to the application (ASIC) or graphic processing units (GPU), in portable units such as trucks, vans or shipping containers.
Mining equipment can be easily moved to take advantage of inexpensive or unregulated electricity sources, often in distant or industrial areas. Unlike fixed mining farms, mobile configurations avoid detection by moving frequently, bypassing electricity meters or accessing the power lines directly. Although these operations allow illegal minors to participate more easily, they create significant risks for energy infrastructure.
In the PRIBAIKALSKY district of the Republic of Buryatia, in Russia, the authorities found a mining operation of illegal mobile cryptocurrency during a routine inspection of a 10 kilovolt electric line. The inspectors found a parked Kamaz truck containing 95 mining platforms and a mobile transformer station, secretly connected to the local electricity network. The configuration used enough electricity to provide a small village, which raises concerns among public services managers. The images have shown the truck equipped with cooling systems and hidden power connections, which allows it to operate not detected in distant areas.
As the authorities approaches, two suspects fled in an SUV, abandoning the equipment. This incident was the sixth case of illegal crypto mining in Buryatia since the beginning of 2025, highlighting the growing use of mobile configurations to bypass operating restrictions and avoiding electricity costs.
MINES BANKS TO SEASON and regional cryptography of Russia
Russia has introduced seasonal and regional restrictions on the exploitation of cryptocurrencies due to concerns concerning energy theft and instability of the electricity network.
According to the authorities of the Republic of Buryatia of Russia, illegal mining operations have greatly frightened local infrastructure, often causing drops of tension and Panus breakdowns in neighboring villages. This problem is particularly serious in Siberian regions such as Buryatia, where subsidized electricity attracts unauthorized minors.
Buryatia imposes a mining ban from November 15 to March 15 of each year to protect energy supplies during the severe winter. Apart from this period, only recorded companies can extract in designated areas, such as Severo-Baikalsky and Muisky districts. These rules guarantee that subsidized electricity, intended for households and essential services, is not used to be unscathed for miners without license.
Similar restrictions apply in other regions contracted to energy, including Daghestan, Chechnya and certain parts of East Ukraine controlled by Russian. In April 2025, Irkutsk prohibited any mine despite the accommodation of Bitriver, a large legal mining company. These measures aim to prevent energy abuse while maintaining the stability of the network and guaranteeing access to the public of electricity.
Did you know? China formerly represented more than 70% of the world’s operation of Bitcoin (BTC) to a national ban in 2021. Many minors fled to countries like Kazakhstan and Russia, reshaping the world mining card almost overnight.
Legarde V. MURING ILLEGAL: The case of Bitriver
While the illegal cryptocurrency extraction operations continue to stretch the energy network of Russia, Bitriver is an example of regulated large-scale exploitation. Located in Irkutsk, Bitriver operates legally, using electricity from local hydroelectric power plants.
Bitriver’s Bratsk Data Center, open in 2019, is the largest cryptography extraction installation in the region. It has become a key element in the Russian mining industry, demonstrating how mining can be both evolving and in accordance with. The center aligns the government’s objective to promote a regulated industry that supports innovation while protecting energy stability. Renewable energy sources allow the company to carry out a mine with a high intensity of energy without additional public infrastructure or rely on subsidized residential electricity.
Unlike secret operators who secretly exploit the rural infrastructure, approved companies like Bitriver align with legal and environmental guidelines. This case highlights the need to differentiate regulated industrial mines and illicit configurations threatening regional power networks.
Ivan Chebeskov, an official of the Russian Ministry of Finance, said that only 30% of cryptographic minors have registered with the Federal Tax Service since the end of 2024. The Russian government began to implement two laws related to the exploitation of Crypto in October and November 2024, which established legal definitions and compulsory registration for business exploitation.
The evolutionary threat of digital energy theft in Russia
Energy flight has gone from physical to digital. Russian pirate groups use technology to secretly access the compromising apparatus power, increasing electricity consumption and carbon footprints. Digital flight is more difficult to detect in relation to theft of traditional energy.
According to Kaspersky, a secret Russian hacking group called Ghouls librarian, or rare werewolf, targets users with phishing emails that seem to be legitimate commercial communications. These emails encourage users to click on attachments or malicious links, which install specialized malware.
Once installed, the malware deactivates Windows Defender to avoid detection and deploys cryptography extraction software which is quietly executed during opening hours, as late at night or weekend. Timing helps hackers to exploit cryptocurrency without users noticing the increased use of resources.
Kaspersky’s conclusions show that hundreds of devices have been affected by this advanced attack, demonstrating the scale and sophistication of Librarian Ghouls operations. Their ability to get around security, deactivate protections and exploit energy by cryptomin highlights the need for increased awareness and stronger cybersecurity measures.
Did you know? Crypto extraction platforms generate so much heat that some minors reuse heat to hot houses, greenhouses or even pools, transforming energy wasted into an unconventional heating solution.
Broader implications of cryptojacking for the cryptographic landscape of Russia
Cryptojacking has created challenges for the Russian cryptography ecosystem, in particular affecting energy stability and the application of regulations. These unauthorized activities secretly use large quantities of electricity for the extraction of crypto, which exerts pressure on regional electrical networks without being noticed.
Cryptojackers’ activities disrupt energy planning. This can cause unexpected power outages, especially in winter, when electricity demand is high in Russia. Illegal mining operations are configured in distant areas or on mobile platforms, such as trucks, which makes them difficult to locate or stop. The operators remain anonymous using false identities, rented locations and decentralized systems.
To deceive and escape the police, cryptojackers use creative methods, such as the hiding place of extraction equipment in shipping containers, the masking of energy consumption with secret transformers or operations in motion quickly to avoid inspections.
Cryptojacking creates stress between the need to promote innovation and apply regulations in the Russian cryptography sector. While the country aims to legitimize certain parts of the industry to encourage investments, generalized illegal activities undermine confidence and complicate efforts to implement support policies.
Did you know? The passage of Ethereum in proof of commissioning (POS) in 2022 (known as “fusion”) reduced its energy consumption by more than 99%, ending GPU exploitation for ether (ETH) and marking a massive change in sustainable cryptographic operations.
How to discover Kamaz trucks reflect broader problems of crypto extraction abuse
The Kamaz Truck affair reflects a wider scheme where illegal crypto minors benefit to the detriment of public services and honest citizens. These operations can disrupt the grid, causing breakdowns or requiring emergency food cuts.
This incident highlights the urgent need for stronger application measures, in particular surveillance of the network in real time, stricter penalties and closer cooperation between the application of the law and energy suppliers. Current efforts are often reactive, allowing mobile and hidden mining operations to take advantage of regulatory gaps. The implementation of proactive surveillance systems and digital energy audit tools could help identify unusual energy consumption models and locate illegal mining configurations.
In addition, better coordination between local governments, public service companies and cybersecurity experts is crucial to counter sophisticated escape tactics. Without changing rapid policy changes, mobile cryptography farms and secret operations will continue to exhaust public resources, both electric and institutional, while hindering efforts to build a consistent and sustainable cryptocurrency economy.
If it is left unanswered, this problem could also dissuade legitimate companies from entering the market due to concerns about reputation risks or in -depth examination. A well-regulated executive would not only reduce illegal mining, but also positions Russia as a leader responsible for global cryptocurrency innovation.