Ukrainian hacker Vyacheslav Igorevich Penchukov, one of the leaders of the JabberZeus hacking group, pleaded guilty to his leading role in the Zeus and IcedID malware groups.
Penchukov (also known as “tank” and “father”) was arrested in Switzerland in October 2022 and extradited to the United States in 2023.
The US Department of Justice first charged him in 2012 for his involvement in operating the Zeus malware and stealingmillionsof dollars.
See also: YouTuber Hayate arrested for abusing disabled people
According to BleepingComputer, Penchukov may have also been involved in the ransomware Maze and Egregor. The Maze group was the first ransomware gang to engage in double extortion attacks, where in addition to encrypting files, data is also stolen. The attackers then threaten to leak the datato exert more pressure and increase the chances of receiving the ransom.
The Maze ransomware was later renamed Egregor and Sekhmet to evade detection by law enforcement. Nevertheless, Penchukov was among the suspects arrested in January 2021 by Ukrainian police. Those arrests followed an international police operation targeting the Egregor ransomware gang.
However, as investigative journalist Brian Krebs, he avoided prosecution by using his political connections, including the son of former Ukrainian president Viktor Yanukovych.
As he himself has now confessed, he belonged to the leadership team of the malware operation IcedID (also known as Bokbot), after being added to the FBI of most wanted in cyberspace, between November 2018 and February 2021.
See also: Former CIA engineer sentenced to 40 years in prison
The IcedID malware was used to steal data victims', including bank account credentials. It is also used for the initial compromise of systems, with the aim of deploying additional malicious payloads, such as ransomware.
“Vyacheslav Igorevich Penchukov was the leader of two prolific malware groups that infected thousands of computers. These criminal groups stole millions of dollars from their victims and even attacked a major hospital with ransomware, leaving it unable to provide critical care to patients for two weeks,” said Deputy Attorney General Nicole M. Argentieri.
“Prior to his arrest and extradition to the United States, the defendant had been a fugitive on the FBI's Most Wanted list for nearly a decade“.
Penchukov pleaded guilty to conspiracy related to racketeering during his leadership role in the Zeus and to conspiracy to commit fraud during his leadership role in the IcedID.
Penchukov faces a possible maximum sentence of 20 years in prison on each count.
🔒 Protect your privacy with Proton VPN
Swiss VPN from the creators of Proton Mail — strict no-logs policy, strong encryption, and built-in NetShield that blocks ads, trackers, & malware.
- ✔ No-logs, based in Switzerland (except 14-Eyes)
- ✔ NetShield: blocks ads, trackers & malicious domains
- ✔ Covers all devices — free version available
The link is an affiliate link — SecNews may receive a commission at no additional cost to you. It does not affect the independence of our article writing.
The arrest and conviction of this hacker could have significant implications for cybersecurity. By removing a key player from the field, it could reduce the number of malware attacks in which he participated.
See also: Russian hacker jailed for involvement in Trickbot malware
Also, this imprisonment can send a strong message to other cybercriminals, showing that their actions have consequences and will not go unpunished.
Finally, the arrest could lead to increased international cooperation in the field of cybersecurity, as countries recognize the need for coordinated action to address cyber threats.
Source: www.bleepingcomputer.com
