Evgeniy Mikhailovich Bogachev, using the nicknames “lucky12345” and “slavik,” is allegedly involved in a wide-ranging racketeering enterprise that installed malicious software known as “Zeus” on victims’ computers, according to the FBI.
The well-known banking Trojan was used to capture bank account numbers, passwords, personal identification numbers, and other information to log into online banking accounts.
Last week, authorities from six European countries took down a major cybercriminal group in Ukraine suspected of developing, exploiting and distributing Zeus and SpyEye, but Bogachev is still free.
Bogachev and its team conspired to distribute spam and phishing emails with links to compromised web sites. Victims who visited the sites were infected with the malware, which Bogachev and others used to raid the victims’ bank accounts, prosecutors say. This online account takeover fraud has been under investigation by the FBI since the summer of 2009.
Starting in September of 2011, the FBI began investigating a modified version of the Zeus Trojan, known as GameOver Zeus (GOZ). It is believed GOZ is responsible for more than 1 million computer infections, resulting in losses of more than $100 million.
FBI reports show that, on August 22, 2012, Bogachev was indicted under the nickname “lucky12345” by a federal grand jury in the District of Nebraska on charges of Conspiracy to Participate in Racketeering Activity; Bank Fraud; Conspiracy to Violate the Computer Fraud and Abuse Act; Conspiracy to Violate the Identity Theft and Assumption Deterrence Act; and Aggravated Identity Theft.
On May 19, 2014, Bogachev was indicted in his true name by a federal grand jury in the Western District of Pennsylvania on charges of Conspiracy; Computer Fraud; Wire Fraud; Bank Fraud; and Money Laundering. On May 30, 2014, a criminal complaint was issued in the District of Nebraska that ties the previously indicted nickname of “lucky12345″ to Bogachev and charges him with Conspiracy to Commit Bank Fraud.
Federal investigators say Bogachev was last known to reside in Anapa, Russia. He is known to enjoy boating and may travel to locations along the Black Sea in his boat. He also owns property in Krasnodar, Russia.
The US Department of State’s Transnational Organized Crime Rewards Program is offering a reward of up to $3 million for any information leading to the suspect.