Four Plead Guilty to RICO Conspiracy Involving Hosting Services for Cybercrime
The "bulletproof hosting" organization hosted malware including Zeus, SpyEye, Citadel, and the Blackhole Exploit Kit.
![](https://eu-images.contentstack.com/v3/assets/blt6d90778a997de1cd/bltc94608acf452fd67/655cf371ab171e040a838b2a/329050_DR23_Graphics_Website_V5_Default_Image_v1.png?width=1280&auto=webp&quality=95&format=jpg&disable=upscale)
Four Eastern European nationals have pleaded guilty for their roles in conspiring to engage in a racketeer-influenced corrupt organization (RICO), which evolved from the group providing "bulletproof hosting" services used to distribute malware and target US-based organizations.
The four defendants were founders and/or members of a group that rented IP addresses, servers, and domains to their cybercriminal clients, the Department of Justice reported late last week. Criminals used the infrastructure to spread malware and gain access to victim machines, create botnets, and steal banking credentials that they could use to conduct more fraud.
Malware hosted by the group included Zeus, SpyEye, Citadel, and the Blackhole Exploit Kit, which targeted US companies and financial organizations between 2009 and 2015 and caused, or attempted to cause, millions of dollars in losses.
The group also helped their criminal clients evade law enforcement by monitoring websites used to blocklist technical infrastructure used for crime. They moved flagged content to new infrastructure and registered it under false or stolen identities, officials report.
This case was investigated by the FBI with assistance from law enforcement agencies in Germany, Estonia, and the United Kingdom. Two of the four defendants are from Russia, one is from Lithuania, and one from Estonia. All four have now pleaded guilty to one count of RICO conspiracy and each faces a maximum penalty of 20 years in prison.
Read the full Justice Department release for more details.
About the Author
You May Also Like
Catch the Threat Before it Catches you: Proactive Ransomware Defense
September 5, 2024How to Evaluate Hybrid-Cloud Network Policies and Enhance Security
September 18, 2024DORA and PCI DSS 4.0: Scale Your Mainframe Security Strategy Among Evolving Regulations
September 26, 2024Harnessing the Power of Automation to Boost Enterprise Cybersecurity
October 3, 2024
[Virtual Event] The Essential Guide to Cloud Management
October 17, 2024Black Hat Europe - December 9-12 - Learn More
December 10, 2024SecTor - Canada's IT Security Conference Oct 22-24 - Learn More
October 22, 2024