‘Most Wanted’ man pleads guilty in cyberattack that upended Vermont hospital

A Ukrainian man pleaded guilty in federal court Thursday to his leadership role in two cyberattack schemes that caused tens of millions of dollars in losses and temporarily crippled a Vermont hospital in 2020, according to the Justice Department.

Prosecutors said that Vyacheslav Igorevich Penchukov, 37, was a leader for an organization that in May 2009 began to infect thousands of computers at corporations with malicious software, and that he helped lead a separate malware scheme that began around November 2018.

Penchukov pleaded guilty in U.S. District Court in Nebraska to one count of conspiracy to commit an offense that violated the Racketeer Influenced and Corrupt Organizations Act and one count of conspiracy to commit wire fraud. He was arrested in Switzerland in 2022 and was extradited to the United States in 2023.

The Justice Department said that Penchukov helped lead “a wide-ranging racketeering enterprise and conspiracy” that installed malicious software known as Zeus onto thousands of business computers, starting in 2009. The malware allowed the enterprise to collect information used to log into online banking accounts.

Penchukov and other members of the group then portrayed themselves as employees of the corporations who were authorized to transfer money from the accounts they targeted, causing millions of dollars in losses, according to the Justice Department.

The money was deposited into the accounts of residents of the United States and other countries and those people then sent it to overseas accounts that were run by Penchukov and other members of the group, according to the Justice Department.

Penchukov had been charged for these offenses in 2012 while he was still at large.

On Thursday, Penchukov also pleaded guilty to his leadership role in the separate malware scheme that ran from at least November 2018 to February 2021, according to federal prosecutors.

The malware, known as IcedID or Bokbot, was installed on computers to collect personal information from victims and the data was used to steal from them, according to the Justice Department. IcedID also allowed the cybercriminals to install more malware on infected computers, including ransomware, which is used to lock digital information until the victim pays for its release.

The targets of these attacks included the University of Vermont Medical Center, which lost more than $30 million, according to the Justice Department.

Penchukov’s sentencing is scheduled for May 9. He faces up to 20 years in prison for each count.

This article originally appeared in The New York Times.

Want to leave a comment?

Create an Account Or sign in to your account

To comment, please create a screen name in your profile

To comment, please verify your email address

Conversation

This discussion has ended. Please join elsewhere on Boston.com