The person at the center of this case
Multiple victims (over 1 million computer infections)
Justice for Multiple victims (over 1 million computer infections) — the trail went cold in 2012, but the truth hasn't.
Start here
Why has Bogachev remained at large in Russia despite multiple federal indictments and international law enforcement attention since 2009?
What technical infrastructure and financial networks supported the distribution and operation of Zeus and GameOver Zeus malware across multiple continents?
Bogachev's known interest in boating and travel along the Black Sea—could monitoring maritime activity or border crossings help locate him?
Evgeniy Mikhailovich Bogachev, a Russian cybercriminal using aliases 'lucky12345' and 'slavik,' is wanted for leading a massive racketeering enterprise that deployed the Zeus and GameOver Zeus malware to steal banking credentials and funds from over one million victims, resulting in losses exceeding $100 million. Bogachev coordinated the distribution of malicious software through phishing emails and compromised websites, systematically capturing account information to facilitate unauthorized account takeovers and theft. Despite FBI investigation since 2009 and federal indictments in 2012 and 2014, Bogachev remains at large and is believed to be hiding in Russia, where he owns property and enjoys boating along the Black Sea.
Try asking
A one-time $10 claim transfers this imported case workspace to your account. You get 10 uploads for this case, 25 daily AI questions for this case, and public tips with files route to you.
This does not start a subscription. When the included limits are reached, the Personal plan unlocks more workspace capacity.
Beyond the top three above — each detail below could be the thread that pulls this case open.
Who were the key co-conspirators in the racketeering enterprise, and have they been identified and prosecuted?
How did Bogachev initially develop the technical expertise and criminal network to orchestrate malware affecting over one million computers?
Even the smallest detail could be the key to solving this case.
Official wording
Conspiracy to Participate in Racketeering Activity; Bank Fraud; Conspiracy to Violate the Computer Fraud and Abuse Act; Conspiracy to Violate the Identity Theft and Assumption Deterrence Act; Aggravated Identity Theft; Conspiracy; Computer Fraud; Wire Fraud; Money Laundering; Conspiracy to Commit Bank Fraud Caution: Evgeniy Mikhailovich Bogachev, using the online monikers “lucky12345” and “slavik”, is wanted for his alleged involvement in a wide-ranging racketeering enterprise and scheme that installed, without authorization, malicious software known as “Zeus” on victims’ computers. The software was used to capture bank account numbers, passwords, personal identification numbers, and other information necessary to log into online banking accounts.
While Bogachev knowingly acted in a role as an administrator, others involved in the scheme conspired to distribute spam and phishing emails, which contained links to compromised web sites. Victims who visited these web sites were infected with the malware, which Bogachev and others utilized to steal money from the victims’ bank accounts.
This online account takeover fraud has been investigated by the FBI since the summer of 2009. Starting in September of 2011, the FBI began investigating a modified version of the Zeus Trojan, known as GameOver Zeus (GOZ).
It is believed GOZ is responsible for more than one million computer infections, resulting in financial losses of more than $100 million. On August 22, 2012, Bogachev was indicted under the nickname “lucky12345” by a federal grand jury in the District of Nebraska on charges of Conspiracy to Participate in Racketeering Activity; Bank Fraud; Conspiracy to Violate the Computer Fraud and Abuse Act; Conspiracy to Violate the Identity Theft and Assumption Deterrence Act; and Aggravated Identity Theft.
On May 19, 2014, Bogachev was indicted in his true name by a federal grand jury in the Western District of Pennsylvania on charges of Conspiracy; Computer Fraud; Wire Fraud; Bank Fraud; and Money Laundering. On May 30, 2014, a criminal complaint was issued in the District of Nebraska that ties the previously indicted nickname of "lucky12345" to Bogachev and charges him with Conspiracy to Commit Bank Fraud.
Remarks: Bogachev was last known to reside in Anapa, Russia. He is known to enjoy boating and may travel to locations along the Black Sea in his boat.
He also owns property in Krasnodar, Russia.
FBI begins investigating online account takeover fraud and malware distribution schemes
FBI begins investigating GameOver Zeus (GOZ), a modified version of the Zeus Trojan
Bogachev indicted under nickname 'lucky12345' in District of Nebraska for racketeering, bank fraud, and computer fraud
Bogachev indicted in his true name in Western District of Pennsylvania for conspiracy, computer fraud, wire fraud, and money laundering
Criminal complaint issued in District of Nebraska linking 'lucky12345' nickname to Bogachev and charging him with conspiracy to commit bank fraud
For information leading to the resolution of this case
For information leading to the resolution of this case