Our Terms of Service and Privacy Policy have changed.

By continuing to use this site, you are agreeing to the new Privacy Policy and Terms of Service.

'Zeus Trojan' zaps $3 million from bank accounts

By Ben Rooney, staff reporter

NEW YORK (CNNMoney.com) -- An international cybercrime ring was broken up Thursday by federal and state officials who say the alleged hackers used phony e-mails to obtain personal passwords and empty more than $3 million from U.S. bank accounts.

The U.S. Attorney's Office charged 37 individuals for allegedly using a malicious computer program called Zeus Trojan to hack into the bank accounts of U.S. businesses and municipal entities.

In a related case, the Manhattan District Attorney, Cyrus Vance, charged 36 individuals for allegedly stealing $860,000 from dozens of individuals and corporations, including JPMorgan Chase.

Law enforcement officials arrested 10 of the defendants Thursday after 10 had already been taken into custody. Those individuals are expected to appear in court later Thursday in New York. Another 17 suspects are still being sought in the United States and abroad.

"This advanced cybercrime ring is a disturbing example of organized crime in the 21st Century -- high tech and widespread," New York District Attorney Cyrus Vance said in a statement.

According to complaints unsealed in Manhattan federal court, defendants used the Zeus Trojan program to surreptitiously obtain personal information and then hack into victims' bank accounts.

The hackers then allegedly made unauthorized transfers of "thousands of dollars" to the bank accounts belonging to co-conspirators. Prosecutors said the malware was typically sent as an "apparently-benign e-mail" that embedded itself in the victims' computers once it was opened.

The program, officials said, recorded keystrokes and allowed hackers to steal private account information, passwords and other "vital security codes."

The alleged cybercriminals, based in Eastern Europe, used "money mules" to transport the stolen money overseas. Some of the mules had entered the United States on student visas or by using fake passports, according to the federal complaint. The FBI has already arrested 10 alleged money mules and 17 remain at large.

"The Zeus Trojan allegedly allowed the hackers, from thousands of miles away, to get their hands on other peoples' money," said FBI Assistant Director Janice Fedarcyk.

"But their scheme didn't eliminate risk," she added. "Like the money mules, many, if not all, will end up behind bars."

The announcement marks the culmination of a year-long investigation conducted by several state and federal agencies, including the FBI, the New York Police Department, the State Department and the U.S. Secret Service.

The charges include conspiracy to commit bank fraud, money laundering and conspiracy to possess false identification documents, among others.  To top of page

Index Last Change % Change
Dow 16,912.29 122.10 0.73%
Nasdaq 4,791.15 42.79 0.90%
S&P 500 1,995.82 15.90 0.80%
Treasuries 2.06 0.03 1.33%
Data as of 4:05pm ET
Company Price Change % Change
Freeport-McMoRan Inc... 12.93 1.10 9.30%
Bank of America Corp... 15.70 0.01 0.06%
General Electric Co 27.65 0.36 1.32%
Apple Inc 110.54 -0.77 -0.69%
Micron Technology In... 18.56 0.34 1.87%
Data as of 3:50pm ET


These two fantasy football players won more than $100,000 on FanDuel and DraftKings earlier this NFL season. Now they sound off on the cheating scandal rocking the industry. More

A new analysis from the Bipartisan Policy Center estimates the U.S. Treasury will not be able to pay all the country's bills in full and on time sometime between Nov. 10 and Nov. 19. More

Saudi billionaire Prince Alwaleed Bin Talal has increased his stake in Twitter, days after the social network named Jack Dorsey as its permanent CEO. More

Smarties, a Halloween candy staple, have been around for 66 years. Three Millennial women are revolutionizing it. More

One of the largest pension funds in the country says it needs to cut benefits for 273,000 current and future retirees as soon as July. Otherwise, it won't be able to pay any benefits after 2025. More