SpyEye bank account hack 'mastermind' pleads guilty

A Russian programmer accused of being the mastermind behind one of the most commonly used bank account hacking kits has pleaded guilty to a related charge in the US.

It is alleged that Aleksandr Panin developed SpyEye, Trojan malware that uses a variety of techniques to siphon off victims' savings.

Prosecutors said the code, which is still in use, had infected more than 1.4 million PCs since its 2009 release.

Panin's arrest had caused controversy.

The US authorities were only able to arrest him last July after he had been detained by police in the Dominican Republic while on holiday.

His lawyer said that although the island never launched extradition proceedings, it put him on a plane to Atlanta where he was taken into custody.

The Russian Foreign Ministry has declared the action part of an "unacceptable" trend, saying that the US should instead submit requests for the arrest of Russian citizens to Moscow. There is no formal extradition treaty between the two countries.

Panin has pleaded guilty to a single count of conspiracy to commit bank fraud and wire fraud.

A second man indicted in the case, Hamza Bendelladj, pleaded not guilty in May. The case against him is still pending.

Prosecutors said that SpyEye was sold for between $1,000 to $8,000 (£605 to £4,830) on underground forums.

The toolkit could be customised to:

The FBI said one client, known as Soldier, had claimed to have made $3.2m using the software over a six-month period, and that 10,000 bank accounts had been compromised by it last year.

Panin was "one of the pre-eminent cybercriminals that we've been able to apprehend and prosecute so far," said federal prosecutor John Horn.

"[He] wrote and polished the code for SpyEye until he had a product that experts described as professional grade."

Panin is due to be sentenced on 29 April.

Others have already been jailed for using the software and laundering the proceeds.