Ukrainian Extradited to US Faces Charges in Jabber Zeus Cybercrime Case

A Ukrainian national believed to be a developer for the Jabber Zeus cybercrime group has been reportedly extradited from Italy to the US. Yuriy Igorevich Rybtsov, 41, of Donetsk, is allegedly the Jabber Zeus developer MrICQ, who was mentioned in a 2012 indictment charging eight other suspected members of the group. He was arrested in Italy and lost his appeal to avoid extradition to the US, and is currently in custody under an FBI arrest warrant.

In the indictment, Rybtsov is described as John Doe #3, aka MrICQ, and is accused of handling notifications of newly compromised organisations and laundering the illicit proceeds from the scheme, which involved stealing bank account details and enabling fraudulent transfers. The Jabber Zeus gang, mainly targeting small to mid-sized businesses, used the Zeus banking Trojan and Jabber-based alerts to capture credentials and trigger transfers to money mules, with millions stolen from victims’ accounts.

Vyacheslav Penchukov, the group’s leader in Ukraine, was arrested in 2022 and sentenced in the US last year to 18 years in prison, with over $73 million in restitution ordered.