Colombian authorities on Wednesday said they have arrested a Romanian hacker who is wanted in the U.S. for distributing a virus that infected more than a million computers from 2007 to 2012.
Mihai Ionut Paunescu (aka “Virus”), the individual in question, was detained at the El Dorado airport in Bogotá, the Office of the Attorney General of Colombia said.
Paunescu was previously charged by the U.S. Department of Justice (DoJ) in January 2013 for operating a bulletproof hosting service that “enabled cyber criminals to distribute the Gozi Virus, the Zeus Trojan and other notorious malware, and conduct other sophisticated cyber crimes.” He was arrested in Romania in December 2012 but managed to avoid extradition to the U.S.
“Through this service, Paunescu, like other bulletproof hosts, knowingly provided critical online infrastructure to cyber criminals that allowed them to commit online criminal activity with little fear of detection by law enforcement,” the DoJ said in an unsealed indictment.
Gozi (aka ISFB, Snifula, or Ursnif), a Windows-based banking trojan, had its roots dating as far back as 2005 prior to its deployment in real-world attacks in 2007. At least 40,000 computers in the U.S., including those belonging to the National Aeronautics and Space Administration (NASA), are said to have been infected with the virus.
Germany, Great Britain, Poland, France, Finland, Italy, and Turkey are the other countries where Gozi infections were reported.