YMCO Leader Pleads Guilty in US Over $14.7M Cybercrime Laundering Scheme

Organizations that suffered financial theft from cybercriminals can expect restitution efforts to intensify as the leader of a major money laundering network pleads guilty. Oleg Korniev, a 42-year-old dual citizen of Ukraine and Russia, admitted in a US court to his role in Your Mule Cashout, or YMCO. According to SecurityWeek, this sophisticated operation helped hackers conceal the theft of funds from US companies and transfer the money abroad, primarily to Eastern European countries.

How it unfolded

• YMCO recruited more than 15,000 US residents to act as money mules, deceiving them into believing they were processing legitimate business transfers.
• The network laundered at least $10 million stolen from over 750 US bank accounts, with mules wiring funds to overseas conspirators instead of receiving payment.
• Korniev pleaded guilty to causing over $14.7 million in losses and laundering at least $7 million, agreeing to forfeit seized cash and pay restitution.
• Four other YMCO members were previously extradited to the US, pleaded guilty, and received prison sentences ranging from 37 to 63 months.

Who is affected

US companies that had bank accounts compromised by cybercriminals using YMCO’s services are the primary victims of this scheme. According to court documents cited by SecurityWeek, the organization allowed hackers to steal money from these business accounts and move it out of the country. The mules, who were deceived into thinking they were working for legitimate firms, withdrew stolen proceeds and wired them to YMCO operators without ever receiving compensation for their efforts.

Our take on the response

The guilty plea marks a significant step in disrupting the financial infrastructure that supports cybercrime. Korniev admitted to creating policies, managing employees, and securing illegal services that supported YMCO’s operations. By pleading guilty to money laundering, computer fraud, access device theft, and aggravated identity theft, he has agreed to full restitution for known victims. This suggests that law enforcement is prioritizing the dismantling of the money movement layer rather than just the initial intrusion tools.

What to do and how to stay safe: YMCO

• Monitor bank account activity for unauthorized transfers or withdrawals, especially those originating from unexpected sources or involving wire transfers.
• Verify the legitimacy of any request to move funds, particularly if it involves withdrawing cash and wiring it to overseas accounts.
• Implement strict internal controls for financial transactions, requiring multi-person approval for large or unusual transfers to prevent unauthorized movements.
• Report any suspicious activity involving personal or business bank accounts to financial institutions and law enforcement immediately to aid in tracking stolen funds.

Step-by-step guide: Social Engineering Tactics: How Attackers Bypass Technical Defenses

General security guidance from the Patch Observer newsroom. It is not confirmed advice from the organisations named in this story.

Frequently asked questions

How much money did the YMCO network launder?

The network laundered at least $10 million stolen from over 750 US bank accounts, with Korniev admitting to laundering at least $7 million personally.

What charges did Oleg Korniev plead guilty to?

Korniev pleaded guilty to money laundering, computer fraud, access device theft, and aggravated identity theft charges in a US court.

How many people were recruited as money mules?

YMCO is estimated to have recruited more than 15,000 US residents to act as money mules for the organization.