Jabber Zeus Developer 'MrICQ' Extradited to U.S.
Summary
Hide ▲
Show ▼
Yuriy Igorevich Rybtsov, known online as 'MrICQ,' was arrested in Italy and extradited to the United States. Rybtsov is alleged to have been a developer for the Jabber Zeus cybercrime group, which used a custom version of the ZeuS banking trojan to steal tens of millions of dollars from U.S. businesses. The Jabber Zeus group targeted small to mid-sized businesses, using man-in-the-browser attacks to intercept banking credentials and one-time passcodes. They recruited money mules to handle stolen funds and laundered proceeds through electronic currency exchanges. Rybtsov was indicted in 2012 and was previously known only by his online handle. He is currently in custody in Nebraska.
Timeline
-
02.11.2025 22:37 1 articles · 8d ago
Jabber Zeus Developer 'MrICQ' Extradited to U.S.
Yuriy Igorevich Rybtsov, known as 'MrICQ,' was arrested in Italy and extradited to the United States. Rybtsov is alleged to have been a key developer for the Jabber Zeus cybercrime group, which used a custom version of the ZeuS banking trojan to steal tens of millions of dollars from U.S. businesses. Rybtsov arrived in Nebraska on October 9, 2025, and is being held under an FBI arrest warrant. The Jabber Zeus group was known for its innovative use of man-in-the-browser attacks and instant message alerts to intercept high-value banking credentials.
Show sources
- Alleged Jabber Zeus Coder ‘MrICQ’ in U.S. Custody — krebsonsecurity.com — 02.11.2025 22:37
Information Snippets
-
Yuriy Igorevich Rybtsov, aka 'MrICQ,' was arrested in Italy and extradited to the U.S.
First reported: 02.11.2025 22:371 source, 1 articleShow sources
- Alleged Jabber Zeus Coder ‘MrICQ’ in U.S. Custody — krebsonsecurity.com — 02.11.2025 22:37
-
Rybtsov is alleged to have been a developer for the Jabber Zeus cybercrime group.
First reported: 02.11.2025 22:371 source, 1 articleShow sources
- Alleged Jabber Zeus Coder ‘MrICQ’ in U.S. Custody — krebsonsecurity.com — 02.11.2025 22:37
-
Jabber Zeus used a custom version of the ZeuS banking trojan to steal banking credentials.
First reported: 02.11.2025 22:371 source, 1 articleShow sources
- Alleged Jabber Zeus Coder ‘MrICQ’ in U.S. Custody — krebsonsecurity.com — 02.11.2025 22:37
-
The group targeted small to mid-sized businesses, using man-in-the-browser attacks.
First reported: 02.11.2025 22:371 source, 1 articleShow sources
- Alleged Jabber Zeus Coder ‘MrICQ’ in U.S. Custody — krebsonsecurity.com — 02.11.2025 22:37
-
Rybtsov was indicted in 2012 and was known only by his online handle until now.
First reported: 02.11.2025 22:371 source, 1 articleShow sources
- Alleged Jabber Zeus Coder ‘MrICQ’ in U.S. Custody — krebsonsecurity.com — 02.11.2025 22:37
-
Rybtsov arrived in Nebraska on October 9, 2025, and is being held under an FBI arrest warrant.
First reported: 02.11.2025 22:371 source, 1 articleShow sources
- Alleged Jabber Zeus Coder ‘MrICQ’ in U.S. Custody — krebsonsecurity.com — 02.11.2025 22:37