Jabber Zeus developer ‘MrICQ’ extradited to US from Italy

Ukrainian national Yuriy Igorevich Rybtsov, also known as MrICQ, has been extradited from Italy to the United States to face cybercrime charges tied to Jabber Zeus. After being arrested in Italy, he lost his extradition appeal and was sent to a Nebraska prison to await trial, following an FBI-backed transfer under an active warrant.

According to the Department of Justice (DOJ), the 2012 indictment named him “John Doe #3” and charged him with handling incoming notifications of newly compromised victims and laundering the group’s proceeds through electronic currency exchanges. Jabber Zeus, a variant of Zeus, operated as a full cybercrime ecosystem and used a real-time alert system called Leprechaun to notify operators when victims entered OTPs on fake banking pages.

The group is said to have targeted small to mid-sized businesses, stealing credentials and other sensitive data to facilitate fraudulent transfers to money mules, with claims of millions of dollars stolen from accounts including those at Bank of America and KeyBank.