
The person at the center of this case
Multiple bank account holders and financial institutions targeted by Zeus malware
Justice for Multiple bank account holders and financial institutions targeted by Zeus malware — the trail went cold in 2026, but the truth hasn't.
Start here
How extensive was the Zeus malware distribution network and how many victims were ultimately compromised across financial institutions?
What is the current location and status of the charged subjects believed to be in Russia and Ukraine?
Were there identifiable patterns in target selection, timing of transfers, or money laundering methods that could help locate remaining subjects?
Multiple individuals operating from Russia and Ukraine orchestrated a sophisticated cybercriminal enterprise using malicious 'Zeus' software to compromise thousands of bank accounts and steal millions in unauthorized transfers. The scheme involved installing malware on victims' computers to capture login credentials and financial information, then executing coordinated fraud across multiple financial institutions. Despite federal charges filed in 2012, several subjects remain at large and the full scope of victim losses and ongoing threats from this network remain incompletely understood.
Try asking
A one-time $10 claim transfers this imported case workspace to your account. You get 10 uploads for this case, 25 daily AI questions for this case, and public tips with files route to you.
This does not start a subscription. When the included limits are reached, the Personal plan unlocks more workspace capacity.
Beyond the top three above — each detail below could be the thread that pulls this case open.
Did any subjects cooperate with authorities or provide intelligence on the broader cybercriminal infrastructure?
Even the smallest detail could be the key to solving this case.
Official wording
Conspiracy to Participate in Racketeering Activity; Bank Fraud; Conspiracy to Violate the Computer Fraud and Abuse Act; Conspiracy to Violate the Identity Theft and Assumption Deterrence Act; Aggravated Identity Theft Caution: These individuals, thought to be located in Russia and Ukraine, are wanted for their involvement in a wide-ranging racketeering enterprise and scheme that installed, without authorization, malicious software known as “Zeus” on victims’ computers. The malicious software was used to capture bank account numbers, passwords, personal identification numbers, and other information necessary to log into online banking accounts.
These subjects were then able to coordinate unauthorized transfers of funds from victims’ accounts. These individuals were charged by a federal grand jury in the District of Nebraska in August of 2012 with Conspiracy to Participate in Racketeering Activity; Bank Fraud; Conspiracy to Violate the Computer Fraud and Abuse Act; Conspiracy to Violate the Identity Theft and Assumption Deterrence Act; and Aggravated Identity Theft.
Subjects charged in the District of Nebraska with conspiracy to participate in racketeering activity, bank fraud, computer fraud and abuse, identity theft, and aggravated identity theft