Dariy Pankov Pleads Guilty in NLBrute Malware Case, Gets 60 Months

Dariy Pankov, the Russian national accused of developing and selling NLBrute malware, pleaded guilty in September 2023 and was sentenced to 60 months in federal prison in January 2024, according to the U.S. Department of Justice (DOJ). He first appeared in federal court in Tampa in February 2023 after being extradited from Georgia.

What happened in the NLBrute case?

The case moved through three stages: an indictment and initial court appearance, a guilty plea, and sentencing. The early charges were allegations; the later DOJ updates report that Pankov pleaded guilty and received a prison sentence.

#	Preview	Product	Price
1		Practical Malware Analysis: The Hands-On Guide to Dissecting Malicious Software	$45.24	Buy on Amazon
2		Learning Malware Analysis: Explore the concepts, tools, and techniques to analyze and investigate...	$39.58	Buy on Amazon
3		MAoS - Malware Analysis on Steroids: Fighting Malware to the Death - Real-World Threats and Reverse...	$33.71	Buy on Amazon
4		Evasive Malware: A Field Guide to Detecting, Analyzing, and Defeating Advanced Threats	$52.32	Buy on Amazon
5		Malware Data Science: Attack Detection and Attribution	$54.93	Buy on Amazon

• February 2023: Pankov appeared before a U.S. magistrate judge in Tampa after being extradited from Georgia. The indictment charged conspiracy, access device fraud, and computer fraud. DOJ’s February 2023 announcement described the charges and emphasized that an indictment is a formal accusation, not proof of guilt.
• September 2023: Pankov pleaded guilty to conspiracy to commit access device fraud and computer fraud, DOJ reported in its plea announcement.
• January 2024: DOJ reported that he was sentenced to 60 months in federal prison. The sentencing announcement is the latest outcome covered here.

What did DOJ say Pankov did with NLBrute?

According to DOJ’s account of the plea agreement, Pankov developed NLBrute, malicious software capable of compromising protected computers by decrypting login credentials such as passwords. DOJ said he used it to obtain credentials from tens of thousands of computers worldwide, then marketed and sold the software to other cybercriminals.

DOJ also said Pankov sold credentials through a dark web site specializing in access to compromised computers. In its September 2023 announcement, the department reported that he listed credentials for more than 35,000 compromised computers and obtained more than $350,000 in illicit proceeds. Those figures describe DOJ’s account of Pankov’s case; they are not a total count of all NLBrute victims or a measure of all losses caused by the malware.

#1 Best Overall

Sale

Practical Malware Analysis: The Hands-On Guide to Dissecting Malicious Software

$45.24

Buy on Amazon

How were the stolen credentials used?

DOJ said credentials obtained through the scheme facilitated illegal activity, including ransomware attacks and tax fraud. The official announcements cited here do not establish a broader victim count or total financial losses attributable to NLBrute.

What do the charges and guilty plea mean?

At the February 2023 appearance, the indictment represented formal charges, and Pankov was presumed innocent unless and until proven guilty. DOJ stated at the time: “An indictment is merely a formal charge that a defendant has committed one or more violations of federal criminal law, and every defendant is presumed innocent unless, and until, proven guilty.” The later case outcome is different: DOJ reported that Pankov pleaded guilty to conspiracy to commit access device fraud and computer fraud, then was sentenced.

Rank #2

Sale

Learning Malware Analysis: Explore the concepts, tools, and techniques to analyze and investigate Windows malware

$39.58

Buy on Amazon

Contemporaneous reporting on the initial appearance also covered the case while it was at the allegation stage; for the plea and sentence, DOJ’s subsequent announcements provide the later procedural updates.

Quick Recap

SaleBestseller No. 1

Practical Malware Analysis: The Hands-On Guide to Dissecting Malicious Software

$45.24

SaleBestseller No. 2

Learning Malware Analysis: Explore the concepts, tools, and techniques to analyze and investigate Windows malware

$39.58

SaleBestseller No. 3

MAoS - Malware Analysis on Steroids: Fighting Malware to the Death - Real-World Threats and Reverse Engineering Tactics

$33.71

SaleBestseller No. 4

Evasive Malware: A Field Guide to Detecting, Analyzing, and Defeating Advanced Threats

$52.32

SaleBestseller No. 5

Malware Data Science: Attack Detection and Attribution

$54.93

Best Value

Sale

Malware Data Science: Attack Detection and Attribution

$54.93

Buy on Amazon

Rank #4

Sale

Evasive Malware: A Field Guide to Detecting, Analyzing, and Defeating Advanced Threats

$52.32

Buy on Amazon

Rank #3

Sale

MAoS - Malware Analysis on Steroids: Fighting Malware to the Death - Real-World Threats and Reverse Engineering Tactics

$33.71

Buy on Amazon

Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.