Ar3s
Ar3s is a cybercrime syndicate with a financial motive, tracked by Brandefense. It targets organisations in Belarus.
- Apec
- Ch1t3r
- Sergey Jaretz
- Sergey Grigorevich Yarets
- Sergey Yarets
- Techniques
- 0
- Exploited CVEs
- No CVE data
- Record updated
Who They Target.
About Ar3s.
Ar3s is a Belarusian cybercriminal known for developing and operating the Andromeda botnet and the Win32/Gamarue HTTP bot. Active in the Russian-speaking cybercriminal underground since at least 2004, he was a highly respected hacker and a key figure in DaMaGeLaB, a hacking forum that later became XSS. He was arrested on December 4, 2017, by Belarusian law enforcement, in cooperation with the FBI and European authorities, as part of the Andromeda botnet takedown. The botnet had infected over 2 million computers worldwide and was used to distribute 80+ malware families. Based on analysis of underground forums, Ar3s is believed to be Sergey Jarets (Sergey Grigorevich Yarets), a Belarusian national from Rechitsa, Gomel Region. His past professional background includes work as Technical Director at OJSC “Televid” Tele-Radio Company.
Last updated Jun 1, 2026. Compiled by Brandefense technologies from structured threat intelligence and reviewed by Brandefense analysts. Techniques follow the MITRE ATT&CK framework.