Cryptojacking Malware Devs Sentenced to 20 Years in Prison

Two members of Romanian hacker gang Bayrob Group were sentenced to two decades in prison after their malware mined crypto on 400,000 infected computers.

AccessTimeIconDec 9, 2019 at 6:00 p.m. UTC
Updated Sep 13, 2021 at 11:47 a.m. UTC

Two members of the prolific Romanian hacker gang Bayrob Group were sentenced to two decades in U.S. prison apiece after their malware mined crypto on 400,000 infected computers.

Group leader Bogdan Nicolescu and co-conspirator Radu Miclaus were sentenced to 20 and 18 years respectively after being found guilty on 21 different counts of wire fraud, money laundering aggravated identity theft and other crimes, a press release announced Friday. The gang was also accused of developing malware which mined bitcoin and monero using their host computers' processing power.

Tiberiu Danet, a third Bayrob Group member, pleaded guilty in Nov. 2018 to eight charges. His sentencing is scheduled for Jan. 8.

From its founding in 2007 to its members’ apprehension and eventual extradition in late 2016, the Bayrob Group, which operated out of Bucharest, Romania, ran a sprawling hacking and malware operation. They deployed trojan malware in seemingly mundane emails from well-known companies and groups, but when victims attempted to download attachments apparently from Norton, the IRS and Western Union, their computers instead became infected with the Bayrob botnet, according to an indictment.

The botnet allowed its Romanian handlers to steal $4 million total, prosecutors claimed.

The botnet also installed crypto mining software, according to the July 2016 indictment. And it was not discreet; the Bitcoin and Monero mining operation hogged hosts’ processing power. 

“Once a bot was instructed to mine for cryptocurrency, much of its processing speed and power would be unavailable to its legitimate owner.”

Bayrob also scanned for and transferred ownership of victims’ crypto wallets, if they had one. 

DISCLOSURE

Please note that our privacy policy, terms of use, cookies, and do not sell my personal information has been updated.

The leader in news and information on cryptocurrency, digital assets and the future of money, CoinDesk is a media outlet that strives for the highest journalistic standards and abides by a strict set of editorial policies. CoinDesk is an independent operating subsidiary of Digital Currency Group, which invests in cryptocurrencies and blockchain startups. As part of their compensation, certain CoinDesk employees, including editorial employees, may receive exposure to DCG equity in the form of stock appreciation rights, which vest over a multi-year period. CoinDesk journalists are not allowed to purchase stock outright in DCG.

Trending

1
CoinDesk - Unknown
CoinShares Completes Napoleon Acquisition, Can Now Offer Products Across EU

The acquisition of Napoleon Asset Management was subject to approval by the AMF, which was granted on June 28.

CoinDesk - Unknown
2
CoinDesk - Unknown
Coinbase Says Miners’ Sales of Newly Minted Bitcoins Don’t Add Significant Market Pressure

If all newly issued bitcoin were immediately sold onto the market each day, it would equate to only 900 BTC of selling pressure, the report said.

CoinDesk - Unknown
3
CoinDesk - Unknown
WonderFi Closes Acquisition of Crypto Trading Platform Coinberry

The Canadian crypto firm says it's open to more deals for firms hit by the crypto winter.

CoinDesk - Unknown
4
CoinDesk - Unknown
Crypto Lender Celsius Cuts 150 Jobs Amid Restructuring: Report

Withdrawals are still paused and the company has hired restructuring experts as it faces a financial crisis.

CoinDesk - Unknown