Cyber News The Record 1 week ago

Leader of vast money mule operation that laundered cybercriminal proceeds pleads guilty

CN
CyberNew Threat Research Desk
• Original Reporting: The Record
CyberNew Threat Intel Assessment
Assessed Severity: INFORMATIONAL
Impacted Surface
Enterprise Perimeter & Network Defense
Intelligence Sector
Cyber News

Analyst Takeaway

"Image: Pixabay via Pexels Leader of vast money mule operation that laundered cybercriminal proceeds pleads guilty The man behind an international organization that laundered money for cybercriminals with the help of more than 15,000 unwitting money mules pleaded guilty Thursday in U.S. federal court. Oleg Korniev, a 42-year-old dual citizen of Ukraine and Russia, was a principal of Your Mule..."

Recommended Defense & Mitigation

  • Threat Monitoring: Ingest published IOCs into SIEM/EDR detection rules for continuous telemetry monitoring.
  • Security Awareness: Alert staff and maintain baseline endpoint hardening across endpoints.
Curated & Verified by CyberNew Threat Intelligence Desk Standard Defense Framework (NIST / MITRE ATT&CK)
money
Image: Pixabay via Pexels

Leader of vast money mule operation that laundered cybercriminal proceeds pleads guilty

The man behind an international organization that laundered money for cybercriminals with the help of more than 15,000 unwitting money mules pleaded guilty Thursday in U.S. federal court. 

Oleg Korniev, a 42-year-old dual citizen of Ukraine and Russia, was a principal of Your Mule Cashout, or “YMCO,” which from 2007 until 2014 set up a sophisticated network of mules in the U.S., as well as Germany, Italy, the United Kingdom and Australia. YMCO recruited people using websites for fake companies that advertised job opportunities.    

Applicants went through a seemingly legitimate hiring process that involved an employment test, contract and company policy review. They were required to upload their bank details into a fictitious company website and were told their job was to receive money into their accounts and then transfer it to legitimate company accounts overseas.  

Source Verification & Original Intelligence

This threat report was reviewed by CyberNew analysts and cross-referenced with primary security disclosures from The Record.

Primary Advisory →