{"id":29976,"date":"2025-11-10T06:51:02","date_gmt":"2025-11-10T11:51:02","guid":{"rendered":"https:\/\/worldjusticenews.com\/news\/?p=29976"},"modified":"2025-11-10T06:51:02","modified_gmt":"2025-11-10T11:51:02","slug":"jailed-hacking-kingpin-reveals-all-about-the-gang-that-left-a-trail-of-destruction","status":"publish","type":"post","link":"https:\/\/worldjusticenews.com\/news\/2025\/11\/10\/jailed-hacking-kingpin-reveals-all-about-the-gang-that-left-a-trail-of-destruction\/","title":{"rendered":"Jailed hacking kingpin reveals all about the gang that left a trail of destruction"},"content":{"rendered":"
\n
\n

After years of reading about “Tank” and months of planning a visit to him in a Colorado prison, I hear the door click open before I see him walk into the room.<\/b><\/p>\n

I stand up ready to give this former cyber-crime kingpin a professional hello. But, like a cheeky cartoon character, he pokes his head around a pillar with a giant grin on his face and winks.<\/p>\n

Tank, whose real name is Vyacheslav Penchukov, climbed to the top of the cyber-underworld not so much with technical wizardry, but with criminal charm.<\/p>\n

“I am a friendly guy, I make friends easily,” the 39-year-old Ukrainian says, with a broad smile.<\/p>\n

Having friends in high places is said to be one of the reasons Penchukov managed to evade police for so long. He spent nearly 10 years on the FBI’s Most Wanted list and was a leader of two separate gangs in two distinct periods of cyber-crime history.<\/p>\n

It is rare to speak to such a high-level cyber-criminal who has left so many victims behind him; Penchukov spoke to us for six hours over two days as part of the ongoing podcast series Cyber Hack: Evil Corp.<\/p>\n

The exclusive interview – Penchukov’s first ever – reveals the inner workings of these prolific cyber-gangs, the mindset of some of the individuals behind them and never-before-known details about hackers still at large – including the alleged leader of the sanctioned Russian group, Evil Corp.<\/p>\n<\/div>\n<\/div>\n

\n
\n

Listen to Cyber Hack now<\/strong><\/p>\n

\n

The full story of the alleged cyber gangs, and the heists and hacks they\u2019re accused of carrying out. Listen on Sounds<\/span><\/a> or If you\u2019re outside the UK, listen here<\/a><\/p>\n<\/div>\n

\n
\n

It took more than 15 years for authorities to finally arrest Penchukov in a dramatic operation in Switzerland in 2022.<\/p>\n

“There were snipers on the roof and the police put me on the ground and handcuffed me and put a bag on my head on the street in front of my kids. They were scared,” he recalls with annoyance.<\/p>\n

He is still bitter about how he was arrested, arguing that it was over the top. His thousands of victims around the world would strongly disagree with him: Penchukov and the gangs he either led or was a part of stole tens of millions of pounds from them.<\/p>\n

In the late 2000s, he and the infamous Jabber Zeus crew used revolutionary cyber-crime tech to steal directly from the bank accounts of small businesses, local authorities and even charities. Victims saw their savings wiped out and balance sheets upended. In the UK alone, there were more than 600 victims, who lost more than \u00a34m ($5.2m) in just three months.<\/p>\n

Between 2018 and 2022, Penchukov set his sights higher, joining the thriving ransomware ecosystem with gangs that targeted international corporations and even a hospital.<\/p>\n

Englewood Correctional Facility, where Penchukov is being held, would not let us take any recording equipment inside the prison, so a producer and I make notes during the interview as we are watched over by a guard nearby.<\/p>\n<\/div>\n<\/div>\n

\n
\n
\"A<\/picture><\/span><\/div>\n

Correspondent Joe Tidy outside Englewood Correctional Facility in Colorado<\/figure>\n<\/div>\n

\n
\n

 <\/p>\n

The first thing that stands out about Penchukov is that, although he is eager to be released, he seems in high spirits and is clearly making the most of his time in prison. He tells me he plays a lot of sport, is learning French and English – a well-thumbed Russian-English dictionary stays by his side throughout our interview – and is racking up high-school diplomas. He must be smart, I suggest. “Not smart enough – I’m in prison,” he jokes.<\/p>\n

Englewood is a low-security prison with good facilities. The low-rise but sprawling building sits in the foothills of the Rocky Mountains in Colorado. The dusty grass verges surrounding the prison are teeming with noisy prairie dogs scurrying into their burrows whenever disturbed by prison vehicles coming and going.<\/p>\n

It is a long way from Donetsk, Ukraine, where he ran his first cyber-crime gang after falling into hacking through games cheat forums, where he would look for cheats for his favourite video games like Fifa 99 and Counterstrike.<\/p>\n

He became the leader of the prolific Jabber Zeus crew – so named because of their use of the revolutionary Zeus malware and their favourite communication platform, Jabber.<\/p>\n

Penchukov worked with a small group of hackers that included Maksim Yakubets – a Russian who would go on to be sanctioned by the US government, accused of leading the infamous cyber-group Evil Corp.<\/p>\n

Penchukov says that throughout the late 2000s, the Jabber Zeus crew would work out of an office in the centre of Donetsk, putting in six to seven-hour days stealing money from victims overseas. Penchukov would often end his day with a DJ set in the city, playing under the name DJ Slava Rich.<\/p>\n

Cyber-crime in those days was “easy money”, he says. The banks had no idea how to stop it and police in the US, Ukraine and the UK could not keep up.<\/p>\n<\/div>\n<\/div>\n

\n
\n
\"A<\/picture><\/span><\/div>\n

After hacking by day, Penchukov performed as DJ Slava Rich by night<\/figure>\n<\/div>\n

\n
\n

 <\/p>\n

In his early 20s, he was making so much money he bought himself “new cars like they were new clothes”. He had six in total – “all expensive German ones”.<\/p>\n

But police got a breakthrough when they managed to eavesdrop on the criminals’ text chats in Jabber and discovered the true identity of Tank using details he had given away about the birth of his daughter.<\/p>\n

The net closed in on the Jabber Zeus crew, and an FBI-led operation called Trident Breach saw arrests in Ukraine and the UK. But Penchukov slipped through the net thanks to a tip-off from someone he will not name. And thanks to one of his fast cars.<\/p>\n

“I had an Audi S8 with a 500-horsepower Lamborghini engine so when I saw the cops flashing lights in my rear view mirror, I jumped the red light and lost them easily. It gave me a chance to test the full power of my car,” he says.<\/p>\n

He laid low with a friend for a while, but when the FBI left Ukraine, the local authorities seemed to lose interest in him.<\/p>\n

So Penchukov kept under the radar and, he says, went straight. He started a company buying and selling coal, but the FBI was still on the trail.<\/p>\n

“I was on holiday in Crimea when I got a message from a friend who saw that I had been put on the FBI Most Wanted list. I thought I had got away with it all – then I realised I have a new problem,” he says, an obvious understatement.<\/p>\n<\/div>\n<\/div>\n

\n
\n
\"The<\/picture><\/span>Penchukov (R) was among the FBI’s most wanted; his two co-conspirators have yet to be caught (Image: FBI)<\/div>\n<\/figure>\n<\/div>\n
\n
\n

 <\/p>\n

His lawyer at the time was calm, though, and advised him not to worry: as long as he did not travel outside of Ukraine or Russia, US police could not do much.<\/p>\n

The Ukrainian authorities did eventually come knocking – but not to arrest him.<\/p>\n

Penchukov had been outed as a wealthy hacker wanted by the West and he alleges that almost every day, officials would come and shake him down for money.<\/p>\n

His coal-selling business was going well until Russia’s invasion of Crimea in 2014. President Putin’s so-called “Little Green Men” – Russian soldiers in unmarked uniforms – ruined his business and missiles struck his apartment in Donetsk, damaging his daughter’s bedroom.<\/p>\n

Penchukov says that it was business troubles and the constant payouts to Ukrainian officials that led him to once again fire up his laptop and get back into the cyber-crime life.<\/p>\n

“I just decided it was the fastest way to make money to pay them,” he says.<\/p>\n

His journey charts the evolution of modern cyber-crime – from quick and easy bank account theft to ransomware, today’s most pernicious and damaging type of cyber-attack used in high-profile hacks this year, including on UK High Street stalwart Marks & Spencer.<\/p>\n

He says ransomware was harder work but the money was good. “Cyber-security had improved a lot, but we were able to make about $200,000 a month. Much higher profits.”<\/p>\n

In a revealing anecdote, he remembers rumours that started about a crew being paid $20m (\u00a315.3m) from a hospital that had been crippled by ransomware.<\/p>\n

Penchukov says the news fired up the hundreds of hackers in the criminal forums who all then went after US medical institutions to repeat the pay day. These hacker communities have a “herd mentality”, he says: “People don’t care about the medical side of things – all they see is 20 millions being paid.”<\/p>\n<\/div>\n<\/div>\n

\n
\n
\"A<\/picture><\/span><\/div>\n

Penchukov’s gang left many victims; one said they felt “disbelief and horror” at losing their money<\/figure>\n<\/div>\n

\n
\n

 <\/p>\n

Penchukov rebuilt his connections and skills to become one of the top affiliates of ransomware services, including Maze, Egregor and the prolific group Conti.<\/p>\n

When asked if these criminal groups worked with Russian security services – a regular accusation from the West – Penchukov shrugs and says: “Of course.” He says that some ransomware gang members sometimes talked about speaking to “their handlers” in the Russian security services, like the FSB.<\/p>\n

The BBC wrote to the Russian Embassy in London, asking if the Russian government or its intelligence agencies engaged with cyber criminals to aid cyber espionage, but received no reply.<\/p>\n

Penchukov soon rose to the top again and became a leader of IcedID – a gang that infected more than 150,000 computers with malicious software and led to various types of cyber-attack, including ransomware. Penchukov was in charge of a team of hackers who would sift through the infected computers to work out how best to make money from them.<\/p>\n

One victim they infected with ransomware in 2020 was the University of Vermont Medical Center in the US. According to US prosecutors, this led to the loss of more than $30m (\u00a323m) and left the medical centre unable to provide many critical patient services for more than two weeks.<\/p>\n

Although no-one died, prosecutors say the attack, which disabled 5,000 hospital computers, created a risk of death or serious injury to patients. Penchukov denies he actually did it, claiming he only admitted to it in order to reduce his sentence.<\/p>\n

Overall, Penchukov, who has since changed his surname to Andreev, feels the two nine-year sentences he is serving concurrently are too much for what he did (he is hoping to get out much sooner). He has also been ordered to pay $54m (\u00a341.4m) in restitution to victims.<\/p>\n<\/div>\n<\/div>\n

\n
\n