Oleg Korniev, 42 , one of the key organizers of the international money laundering ring called “ Your Mule Cashout ” (YMCO), pleaded guilty . The organization allegedly facilitated the movement of money derived from cyberattacks and online fraud , utilizing an extensive network of more than 15,000 people in the United States who acted as money transporters, known internationally as money mules .
Korniev, who holds Ukrainian and Russian citizenship, admitted to being involved in an organized system of transferring and hiding illicit funds. The case highlights the crucial role that financial intermediaries in modern cybercrime, allowing perpetrators to move money between bank accounts and countries, making it difficult to trace its true origin.
How the Your Mule Cashout network worked
According to court documents, YMCO had been operating since at least September 2007, developing an organized process of recruiting people who would be used to transfer money from criminal activities.
See also: Flax Typhoon exploits five vulnerabilities
Prospective carriers were approached via spam emails, which appeared to come from legitimate-looking companies. Recipients were informed that they could take on work related to managing payments and processing financial transactions.
The process often resembled a regular employee hiring process. Those interested were given instructions on their role and asked to use personal bank accounts to receive and forward money.
In reality, the funds came from cybercriminals and victims of online fraud. The carriers received the amounts in their accounts and then sent them, including through services such as Western Union and MoneyGram, to cashing partners in Moldova, Ukraine, Russia and Latvia.
In this way, criminals created multiple stages between the initial theft and the final receipt of the money, making it more difficult to track their route .
Korniev's role and the millions of dollars
Korniev does not appear in the case as a mere intermediary. According to court documents, he had an administrative role in the organization, managing personnel, hiring and firing employees, and rewarding or punishing members depending on their performance.
At the same time, he participated in the formulation of internal rules and procedures that allowed the circuit to operate systematically. This specific organizational structure demonstrates that the legalization of illegal proceeds was not based exclusively on individual transactions, but on a process with a division of responsibilities and international collaborations.
He admitted to laundering at least $7 million of the approximately $9.7 million he had received from cybercriminals. He also acknowledged that the ring's activities were associated with actual and potential losses of more than $14.7 million for confirmed victims.
The organization allegedly trafficked more than $10 million stolen from more than 750 bank accounts in the US, which were linked to over 35 financial institutions.
The charges and sentences he faces
Korniev pleaded guilty to money laundering, identity theft and conspiracy to commit money laundering, wire fraud and theft of means of access.
See also: FBI seizes seven domain names used by Integrity Tech
🔒 Protect your privacy with Proton VPN
Swiss VPN from the creators of Proton Mail — strict no-logs policy, strong encryption, and built-in NetShield that blocks ads, trackers, & malware.
- ✔ No-logs, based in Switzerland (except 14-Eyes)
- ✔ NetShield: blocks ads, trackers & malicious domains
- ✔ Covers all devices — free version available
The link is an affiliate link — SecNews may receive a commission at no additional cost to you. It does not affect the independence of our article writing.
Based on the information in the case, he faces a prison sentence that could range from two to 50 years. The final sentence will be determined during the trial and should not be confused with the maximum sentence.
Four other individuals associated with YMCO were arrested overseas more than a decade ago and extradited to the Western District of North Carolina. After pleading guilty to conspiracy to commit money laundering, they were sentenced to prison terms ranging from 37 to 63 months. They were also ordered to pay more than $9.1 million each in restitution to victims in the United States, according to the release.
For its part, the US Department of Justice stressed that tackling such networks requires prosecuting both the individuals who move the money and those who organize and coordinate their activity.
The international dimension of money laundering
YMCO is said to have developed similar networks in Germany, Italy, the United Kingdom and Australia. The geographical spread highlights a key difficulty in combating cybercrime: attacks, victims, bank accounts and the ultimate recipients of the money may be located in different jurisdictions.
This requires cooperation between banks, law enforcement agencies and international organizations, as well as sharing information on suspicious transactions. Even when a fraud is detected, recovering the money can prove particularly difficult if the funds have already been transferred to multiple accounts or cashed out in different countries.
Five years ago, Europol announced that, as part of Operation EMMA (European Money Mule Action), authorities from 27 countries identified 18,351 potential money and arrested 1,803 people.
These figures highlight that the phenomenon is not limited to the US, but is an international problem linked to many forms of electronic fraud.
How money mules are recruited and how to protect yourself
Organized crime groups often target students, immigrants, and people facing financial hardship, advertising easy work-from-home jobs and quick income. In some cases, these individuals may be unaware of the true source of the money. In others, they may be coerced or threatened.
See also: ASOS: Social engineering attack behind data leak
However, using a personal bank account to transfer third-party money can have serious legal and financial consequences, even when the initial approach is presented as legitimate work.
For this reason, users should be particularly wary of ads that promise high fees for simple payment processingwithout a clear job description or verifiable company information. They should also not provide bank accounts, passwords, or identification information to unknown employers.
If someone receives money they are not expecting or realizes that it is being used as an intermediary in suspicious transactions, they should immediately contact their bank and inform the competent authorities, avoiding forwarding the amounts to third parties.
The YMCO case is a reminder that cybercrime does not end with the theft of data or money. The transfer and concealment of illicit proceeds are a crucial stage in the criminal chain, while public awareness remains a key tool in limiting the recruitment of new money mules.
source: www.bleepingcomputer.com
