Gang of Zeus-driven bank thieves put out of business

A mid-level organizer of an international online bank-theft ring that relied on the Zeus Trojan faces up to 45 years in prison when he is sentenced Jan. 13 after pleading guilty to conspiracy to commit bank fraud and possession of false IDs.

Nikolay Garifulin, 27, of Volgograd, Russia, was accused by the U.S. Attorney in New York of collecting and distributing the stolen money for the masterminds behind the scheme. Garifulin and two others were charged with running the money-mule operation that received the stolen money and shepherded it back to the bosses, according to the U.S. Attorney's office.

Prosecutors have now gotten guilty decisions for 27 of 37 defendants in the operation, with eight more still on the run and two who have entered deferred prosecution agreements.

ZEUS: Researchers see improvements in breakaway Zeus malware

Those involved were foreign exchange students in the U.S. on visas who set up bank accounts using phony IDs. Funds from compromised accounts were transferred into these phony accounts, then transferred to other accounts or were withdrawn and smuggled overseas in cash to the organizers of the criminal operation. Some of the funds wound up in Eastern Europe.

Legitimate accounts were compromised by infecting victims' machines with Zeus, which logged bank account passwords and sent them to criminals' servers. The criminals used these passwords to break into accounts and transfer funds, according to the U.S. Attorney's office.

The thieves stole thousands of dollars at a time for a total of more than $3 million before they were caught.

While Garifulin faces 45 years, the stiffest penalty so far to one of the leaders of the mule operation was 48 months.

Read more about wide area network in Network World's Wide Area Network section.

Tags cybercrimelegalZeuS Trojan

Show Comments