Threat Intelligence
Leader of International Money Mule Network Pleads Guilty to Laundering Cybercrime Proceeds
Oleg Korniev, leader of a global money mule operation, has pleaded guilty to laundering over $10 million for cybercriminals using fake job offers and unwitting recruits.
Ross GrantUpdated 3 min read
The short version
A man ran a fake job scheme that tricked thousands of people into moving stolen money for hackers. He pleaded guilty in court. The operation used fake companies to recruit people who thought they were doing real work, but were actually helping cybercriminals hide their tracks.
By the numbers
- $10 millionAmount laundered by YMCO for hackersRecorded Future News
- 15,000+People recruited as money mulesRecorded Future News
- 750U.S. bank accounts compromisedRecorded Future News
- 2 to 50 yearsPrison sentence range Korniev facesRecorded Future News
- 37 to 63 monthsSentences for four other YMCO membersRecorded Future News
What happened?
Oleg Korniev, leader of a global money mule operation called Your Mule Cashout (YMCO), pleaded guilty in U.S. federal court to laundering at least $10 million for hackers. YMCO recruited over 15,000 people through fake job offers to help move stolen funds from malware attacks on U.S. bank accounts. Korniev was arrested in North Carolina in December, nearly nine years after his indictment.
The Money Mule Scheme
According to Recorded Future News (opens in a new tab), Oleg Korniev ran a network called Your Mule Cashout (YMCO) from 2007 to 2014. YMCO set up fake companies online, advertising jobs that seemed legitimate. People who applied went through what looked like a real hiring process, including tests and contract reviews. They were told their job was to receive money in their bank accounts and transfer it overseas. In reality, they were acting as money mules, moving stolen funds for cybercriminals.
YMCO operated in the United States, Germany, Italy, the United Kingdom and Australia. Over 15,000 people were recruited as mules, most of them unaware they were helping launder money.
How the Operation Laundered Money
YMCO laundered at least $10 million for hackers. These hackers used malware to break into 750 U.S. bank accounts. The stolen money was sent to the mules, who then wired it to Eastern Europe using services like Western Union and MoneyGram. There, "Cash-out Contractors" collected the funds, kept a share, and sent the rest back to YMCO.
Arrests and Legal Action
Korniev, a dual citizen of Ukraine and Russia, was arrested in North Carolina in December, nearly nine years after being indicted. He pleaded guilty to money laundering, conspiracy to commit computer fraud, conspiracy to commit access device theft, and aggravated identity theft. He faces a minimum of two years and up to 50 years in prison.
Another alleged leader, Serghei Ivanovich Tomuz, was reportedly arrested in Romania in 2022 but fought extradition. His case in the U.S. was terminated in May. Four Ukrainians linked to YMCO had already pleaded guilty in 2018 and were sentenced to between 37 and 63 months in prison.
What This Means for Job Seekers and Banks
Fake job scams like this are a common way for criminals to move stolen money. People who unknowingly become money mules can face legal trouble and have their bank accounts closed. Banks and law enforcement often monitor for suspicious transfers, but these scams can be hard to spot, especially when the hiring process looks real.
What to Watch For
If a job asks you to use your personal bank account to move money, it's a red flag. Legitimate companies do not need employees to transfer funds this way. Always research any company offering remote work, especially if the process seems too easy or the company is hard to verify.
What Happens Next
Korniev's guilty plea is a step in holding cybercrime facilitators accountable. The case also highlights the ongoing risk of money mule scams and the need for awareness among job seekers and financial institutions. Authorities continue to pursue other suspects involved in similar operations.
Claimed vs confirmed
- Confirmed
YMCO laundered at least $10 million for hackers using over 15,000 mules.
Recorded Future News reports this based on court proceedings.
- Unconfirmed
Serghei Ivanovich Tomuz ran the cash-out team and laundered money for YMCO.
Recorded Future News reports this, but no court confirmation is cited.
The impact
- Money
- YMCO laundered at least $10 million in stolen funds. Korniev faces up to 50 years in prison. U.S. law allows for significant fines and asset forfeiture in money laundering cases.
- Reputation
- The case highlights the risk to job seekers and the reputational damage to banks whose accounts were used. It also shows the ongoing challenge of stopping money mule operations.
- Customers
- People recruited as mules may face legal trouble and have their bank accounts closed. Job seekers should be cautious with offers that involve moving money.
Why it matters
This case shows how cybercriminals use social engineering to recruit ordinary people as money mules, often without their knowledge. It highlights the risk of fake job scams and the importance of being cautious with job offers that involve moving money.
How does it work?
The operation used fake company websites to recruit people as 'employees'. These recruits, believing they had legitimate jobs, provided their bank details and transferred stolen money overseas. The funds came from cybercriminals who had used malware to steal from bank accounts.
Key points
- A global money mule network laundered over $10 million for hackers.
- Over 15,000 people were recruited through fake job offers.
- The operation used malware to steal from 750 U.S. bank accounts.
- The leader, Oleg Korniev, pleaded guilty and faces up to 50 years in prison.
- Job seekers should be wary of roles that involve moving money for a company.
Sources
Recorded Future News
Reference
