LIVE · cybersecurity feed
Live wire
security

Leader of vast money mule operation that laundered cybercriminal proceeds pleads guilty

Oleg Korniev, a 42-year-old dual citizen of Ukraine and Russia, pleaded guilty in U.S. federal court on Thursday to charges related to his leadership of an international money laundering operation known as Your Mule Cashout (YMCO). The organization, active from 2007 to 2014, utilized a network of over 15,000 unwitting money mules across the United States, Germany, Italy, the United Kingdom,…

ZeroDay News ·

Source: The Record

Oleg Korniev, a 42-year-old dual citizen of Ukraine and Russia, pleaded guilty in U.S. federal court on Thursday to charges related to his leadership of an international money laundering operation known as Your Mule Cashout (YMCO). The organization, active from 2007 to 2014, utilized a network of over 15,000 unwitting money mules across the United States, Germany, Italy, the United Kingdom, and Australia.

YMCO is confirmed to have laundered at least $10 million for cybercriminals who compromised approximately 750 U.S. bank accounts using malware. The funds were primarily transferred to Eastern Europe via services like Western Union and MoneyGram. There, "Cash-out Contractors" received the money and, for a percentage, returned it to YMCO.

The recruitment of money mules involved deceptive practices. YMCO established fake company websites advertising job opportunities. Applicants underwent what appeared to be a legitimate hiring process, including an employment test, contract review, and company policy review. They were instructed to upload their bank details to a fictitious company website and were told their role was to receive funds into their accounts before transferring them to legitimate company accounts overseas.

Korniev was arrested in North Carolina last December, nearly nine years after a grand jury indictment. He faces a minimum prison sentence of two years and a maximum of 50 years. His guilty plea covers charges of money laundering, conspiracy to commit computer fraud, conspiracy to commit access device theft, and aggravated identity theft.

The indictment also named Serghei Ivanovich Tomuz, a Moldovan national, who allegedly managed the cash-out team in Moldova and laundered money for YMCO. Tomuz's case in U.S. federal court was terminated in May of this year. He was reportedly arrested at a Romanian border crossing in May 2022 and subsequently fought extradition to the U.S.

Prior to Korniev's plea, four Ukrainian individuals connected to YMCO had already pleaded guilty to conspiracy to commit money laundering. They were sentenced in 2018 to prison terms ranging from 37 months to 63 months.

ShareXLinkedInWhatsAppFacebook

More News

view all →
breach

Hundreds of thousands impacted by data breach at biosensor firm iRhythm

Medical device manufacturer iRhythm has confirmed a data breach affecting at least 360,000 individuals, following a cyberattack that occurred in June. The company, known for its Zio Patch cardiac monitoring device, began issuing breach notifications to regulators and victims across multiple states this week.

breach

FBI touts another ShinyHunters arrest in response to data breach

The FBI announced another arrest this week in connection with the ShinyHunters cybercriminal organization, following a recent breach of the FBIjobs.gov domain. FBI Director Kash Patel stated on Friday morning that agents had arrested a suspected co-conspirator of the group in an operation earlier in the week, emphasizing ongoing efforts to dismantle the network.

ransomware

Germany arrests alleged core Qilin ransomware member after extradition

German authorities have arrested a Russian national suspected of being a key member of the Qilin ransomware group. The individual was extradited from Japan earlier this month, following their initial detention in May at a hotel in Osaka.

ai

Wikimedia Says Rogue AI Agents Abused its Platforms

Wikimedia, the non-profit organization behind Wikipedia and other open-knowledge platforms, has reported that autonomous AI agents from OpenAI have engaged in unauthorized activities on its services. The findings, detailed in an October 5 blog post by Chief Product and Technology Officer Selena Deckelmann, emerged from an internal investigation prompted by broader industry discussions about…

breach

Belarusian hacktivists admit to 2023 breach of Russian state healthcare network

Belarusian hacktivists have claimed responsibility for a 2023 breach of the Moscow Department of Health, confirming their involvement in an intrusion recently disclosed by a Russian cybersecurity firm. The group, known as the Belarusian Cyber Partisans, stated on Friday that they infiltrated the network and obtained administrator-level access to its infrastructure, which included systems…

aicritical

AI Training Critical as Governance Challenges Grow

Many organizations are struggling to effectively manage artificial intelligence (AI) technologies due to a lack of necessary skills and robust governance frameworks. This challenge comes as AI rapidly integrates into enterprise operations, with 54% of organizations currently onboarding or implementing AI solutions, an increase from 46% in 2024.