Loading threat actor…
Your Mule Cashout (YMCO) is a financially motivated criminal organization that has operated since September 2007, providing money-laundering and cash-out services to cybercriminals. It maintained an extensive network of money mules and internet infrastructure to conceal proceeds stolen from U.S. companies' bank accounts and transfer them abroad, primarily to Eastern Europe. YMCO recruited more than 15,000 U.S.-based money mules and laundered at least $10 million stolen from more than 750 U.S. bank accounts. Its cybercriminal customers paid the organization a percentage of the stolen funds. YMCO recruited U.S. residents through spam messages and fraudulent employment offers from fictitious companies. Recruits underwent an apparently legitimate hiring process and were told they would process business payments. They were instructed to receive funds in their personal bank accounts, withdraw the money, and remit it to purported business partners overseas, who were actually participants in the laundering operation. The recruits did not receive the promised compensation. Oleg Korniev, a Ukrainian-Russian dual citizen, was one of YMCO's leaders. He developed operational policies, managed personnel, and obtained illicit services supporting the organization. Korniev pleaded guilty to money-laundering, computer-fraud conspiracy, access-device-theft conspiracy, and aggravated-identity-theft offenses. He admitted personally laundering at least $7 million and acknowledged more than $14.7 million in actual and intended losses to confirmed victims attributable to YMCO. Four other participants also pleaded guilty to money-laundering conspiracy.
Mallory correlates actor tradecraft and target patterns against your stack, your sector, and your geography. See overlap before they land.
Who, where, and (when attributed) which flag flies behind the operation. Pulled from open-source reporting and Mallory's analyst review.
Sectors the actor has been observed targeting.
Geographies tied to known operations.
2 sources tracked across advisories, community write-ups, and news. New activity surfaces here as Mallory finds it.
A cybercrime-support organization that laundered stolen funds for cybercriminals worldwide through recruited money mules and overseas cash-out contractors. The article reports more than $14.7 million in actual and intended victim losses associated with the operation. Leader Oleg Korniev pleaded guilty to money laundering, aggravated identity theft, and conspiracies involving money laundering, computer fraud, and access device theft. No malware or ransomware use is specified.
An international cybercrime-enabling money laundering organization that recruited more than 15,000 U.S.-based money mules and laundered at least $10 million stolen from over 750 U.S. bank accounts. YMCO charged cybercriminals a percentage of stolen funds to transfer proceeds overseas, primarily to Eastern Europe. Leader Oleg Korniev pleaded guilty to money laundering and related offenses. The content does not identify malware or ransomware used by YMCO.
Match sector + geo + tech-stack targeting against your real footprint.
Every observed MITRE ATT&CK technique, grouped by tactic.
Families this actor is known to deploy, with IOCs and behavior.
CVEs this actor has used in known campaigns.
YARA, Sigma, Snort, and vendor rules, auto-deployed to your SIEM.
Domains, IPs, and hashes tied to this actor, refreshed continuously.