Security News > 2023 > June > Bulletproof hoster gets 3 years for pushing Urfsnif, Zeus malware
Romanian national Mihai Ionut Paunescu, aka "Virus," was sentenced to three years in prison by a Manhattan federal court for running a bulletproof hosting service and facilitating the distribution of the Gozi, Zeus, SpyEye, and BlackEnergy malware.
Bulletproof hosting services are web hosting companies in countries with lenient or non-enforced internet laws that follow relaxed policies regarding their clients' illicit content and activities.
The Department of Justice says Paunescu's service facilitated the distribution of several info-stealing and banking malware families, including Gozi, Zeus, SpyEye, and BlackEnergy, and also the launching of DDoS attacks and distribution of spam messages worldwide.
"Paunescu ran a 'bulletproof' hosting service that enabled cyber criminals throughout the world to spread malware that stole confidential financial information, crashed websites, and caused other harm," commented U.S. Attorney Damian Williams.
"By allowing cybercriminals to acquire online infrastructure for their unlawful activity without revealing their true identities, Paunescu's bulletproof hosting service shielded his criminal customers from both law enforcement and cybersecurity professionals while enriching himself. Paunescu now faces prison time and will be required to forfeit his ill-gotten gains."
The distribution of Ursnif was the most notable cybercrime activity backed by Paunescu's hosting service, with the malware infecting over a million computers worldwide.