Andrey Ghinkul, a 31-year-old from Moldova, has admitted to unleashing one of the most destructive malware campaigns to hit American bank accounts. Operating under aliases including “Andrei Ghincul” and “Smilex,” Ghinkul pleaded guilty in Pittsburgh federal court to conspiracy and computer damage charges tied to the global distribution of the Bugat malware.
The malware, also known as Cridex and Dridex, is a weaponized digital toolkit engineered to hijack online banking credentials. It infiltrated victims’ computers through phishing emails and malicious attachments, then deployed keystroke logging and web injects to intercept login data. Once inside, the malware siphoned millions in fraudulent electronic transfers from compromised accounts.
Ghinkul’s operation was not a solo act. He was part of a sophisticated international ring that coordinated the deployment, data harvesting, and cash-out phases of the scheme. Acting U.S. Attorney Soo C. Song confirmed that the conspiracy targeted financial institutions and individual accounts across the United States, exploiting weaknesses in digital banking systems for massive illicit gain.
U.S. District Judge Cathy Bissoon, presiding over the case, scheduled sentencing for July 13, 2017. Ghinkul faces up to 15 years in prison and a fine of $500,000, or both. The Federal Sentencing Guidelines will weigh the severity of the crimes and any prior criminal history—though details on prior offenses remain sealed.
The prosecution was led by Assistant U.S. Attorneys Mary McKeen Houghton and Shardul S. Desai, who emphasized the transnational reach of cybercriminal networks and the DOJ’s commitment to dismantling them. The case marks another front in the federal crackdown on foreign hackers exploiting U.S. financial infrastructure.
The Federal Bureau of Investigation spearheaded the investigation, tracking digital footprints across continents to identify and apprehend Ghinkul. The agency’s cyber division has increasingly prioritized malware distributors behind large-scale financial intrusions, calling Bugat a persistent and evolving threat to consumers and institutions alike.
Related Federal Cases
- Bulgarian Hacker Krasimir Nikolov Charged in $1.5M GozNym Scheme · Pennsylvania
- Morgan Culbertson Gets Probation for Dendroid Malware Scheme · Pennsylvania
- Ukrainian Hacker Pleads Guilty to Massive Hacking Scheme · New Jersey
- Pittsburgh Hacker Gets Probation in Law Firm Breach · Pennsylvania
- Lancaster Hacker Ryan Collins Gets 18 Months for Celeb Email Breach · Pennsylvania
Key Facts
- State: Pennsylvania
- Agency: DOJ USAO
- Category: Cybercrime
- Source: Official Source ↗
🔒 Get the grimiest stories delivered weekly. Subscribe free →
Browse More
MORE FEDERAL CRIME NEWS
CybercrimeCybercrimeCybercrimeCybercrime