Dive into the shadowy world of cyber-crime with a kingpin who's finally lifting the veil – and trust me, what he reveals will shock you to your core.
Tank's Tell-All: A Cyber-Crime Boss Unveils the Chaos He Unleashed
By Joe Tidy, Cyber Correspondent, Reporting from Colorado
After countless articles about the enigmatic "Tank" and extensive preparations for a prison visit in Colorado, the door clicks open, and there he is, not with a dramatic entrance, but popping his head around a pillar like a mischievous cartoon figure, flashing a huge grin and giving a playful wink.
Tank, whose birth name is Vyacheslav Penchukov, didn't rise to the pinnacle of the cyber-underworld through sheer technical genius, but by sheer charisma and people skills.
"I'm just a friendly guy who makes pals wherever I go," the 39-year-old from Ukraine declares, beaming widely.
Having connections in influential circles is rumored to be why he dodged law enforcement for such an extended period. He spent nearly a decade on the FBI's Most Wanted list, leading two different gangs across separate eras of online villainy.
It's uncommon to chat with a top-tier cyber-offender who's impacted so many lives; Penchukov opened up to us for six solid hours across two days for our ongoing podcast series, Cyber Hack: Evil Corp.
This exclusive chat – his very first public interview – peels back the layers of these notorious cyber-syndicates, the psychology of the people running them, and undisclosed facts about hackers still roaming free, including the supposed head of the blacklisted Russian outfit, Evil Corp.
Tune in to Cyber Hack right now for the complete saga of these suspected cyber-clans and the massive heists and breaches they've allegedly executed.
It took over 15 years for authorities to corner Penchukov in a high-stakes takedown in Switzerland back in 2022.
"Snipers lined the rooftops, cops slammed me to the pavement, cuffed me, and bagged my head right there on the street in front of my terrified kids," he recounts, still irritated.
He's far from pleased about the arrest tactics, claiming they were excessive. Yet, the thousands of people worldwide he's victimized would vehemently disagree: Penchukov and the crews he commanded or joined pilfered millions upon millions of pounds from them.
In the late 2000s, he teamed up with the notorious Jabber Zeus group, employing groundbreaking cyber-tools to siphon funds straight from bank accounts belonging to small enterprises, local governments, and even charitable organizations. These victims watched their funds vanish and their finances crumble. In the UK alone, over 600 individuals suffered losses exceeding £4 million ($5.2 million) in just three months.
From 2018 to 2022, Penchukov aimed bigger, diving into the booming ransomware scene with outfits targeting global corporations and even healthcare facilities.
The Englewood Correctional Facility, where Penchukov is incarcerated, prohibited any recording devices, so my producer and I jotted down notes under the watchful eye of a nearby guard.
What immediately strikes you about Penchukov is his upbeat demeanor despite longing for freedom. He shares that he's staying active with sports, picking up French and English – a well-used Russian-English dictionary never leaves his side during our talks – and earning high school diplomas. I comment on his intelligence. "Smart enough? Clearly not – look where I ended up," he quips with a laugh.
Englewood is a low-security spot with decent amenities, a low-slung structure sprawled amid Colorado's Rocky Mountain foothills. The dusty lawns buzz with prairie dogs darting into burrows at the slightest disturbance from prison traffic.
This is worlds away from Donetsk, Ukraine, where he launched his initial cyber-operation after stumbling into hacking via cheat codes on gaming forums for favorites like FIFA 99 and Counter-Strike.
He emerged as the head of the infamous Jabber Zeus team – dubbed for their reliance on the innovative Zeus malware and Jabber as their go-to chat app.
Penchukov collaborated with a tight-knit hacker squad, including Maksim Yakubets, a Russian later sanctioned by the U.S. for allegedly spearheading the dreaded Evil Corp.
He describes how, during the late 2000s, the Jabber Zeus crew operated from a downtown Donetsk office, clocking six to seven-hour shifts daily to drain overseas targets. Penchukov often wrapped up with DJ gigs in town, spinning as DJ Slava Rich.
Back then, cyber-crime felt like "easy cash," he says. Financial institutions were clueless on defense, and law enforcement in the U.S., Ukraine, and UK struggled to keep pace.
In his early twenties, wealth flowed so freely he acquired luxury cars "like they were disposable clothes." He owned six – all pricey German models.
But the tide turned when police infiltrated their Jabber chats, uncovering Tank's identity from clues he unwittingly shared about his daughter's birth.
The net tightened on Jabber Zeus via Operation Trident Breach, a FBI-led sweep netting arrests in Ukraine and the UK. Penchukov evaded capture thanks to an anonymous tip and his speedy wheels.
"I floored my Audi S8 with its 500-horsepower Lamborghini motor – when I spotted cops in my mirror, I blasted through a red light and shook them off. It was like testing the beast's full roar," he recalls.
He hid out with a buddy briefly, and once the FBI pulled back from Ukraine, local cops seemed to lose steam on his case.
Penchukov stayed low-key, claiming he went legit by running a coal trading business. But the FBI persisted.
"I was vacationing in Crimea when a pal messaged that I'd hit the FBI Most Wanted poster. I figured I'd slipped away – boy, was I wrong," he admits, understating it dramatically.
His then-lawyer stayed cool, urging him not to fret: as long as he stuck to Ukraine or Russia, U.S. authorities were hamstrung.
Eventually, Ukrainian officials paid visits – not for arrest, but allegedly to extort bribes daily from this exposed wealthy hacker.
His coal venture thrived until Russia's 2014 Crimea invasion. President Putin's "Little Green Men" – soldiers in unmarked gear – tanked his operations, and missiles damaged his Donetsk apartment, hitting his daughter's room.
Penchukov claims business woes and relentless payoffs drove him back to cyber-crime as the quickest cash route.
"I figured it was the fastest fix to settle those debts," he explains.
His path mirrors cyber-crime's shift from simple bank thefts to ransomware – today's most devastating digital assault, seen in major breaches this year, like the one hitting UK retail giant Marks & Spencer. For beginners, ransomware is a type of malicious software that locks up a victim's files or systems, demanding payment to restore access, often crippling businesses and institutions.
He admits ransomware demanded more effort, but payouts were lucrative. "Cyber defenses had ramped up, yet we pulled in around $200,000 monthly – way better margins."
In a telling story, he recalls whispers of a gang scoring $20 million (£15.3 million) from a hospital hit by ransomware, sparking a frenzy among forum hackers to target U.S. medical sites for similar jackpots. These online communities exhibit a "pack mentality," he notes: "Folks ignore the human toll – they just eyeball those millions."
But here's where it gets controversial: Is this 'herd mentality' just a byproduct of greed, or does it reveal a deeper flaw in human nature when money's on the line?
Penchukov revived his networks and talents, becoming a top player in ransomware affiliates like Maze, Egregor, and the powerful Conti group.
When pressed on Western claims that these outfits collaborated with Russian intelligence – a frequent accusation – Penchukov shrugs: "Absolutely." He mentions how some gang members chatted about liaising with "handlers" from Russian agencies like the FSB.
We reached out to the Russian Embassy in London for comment on whether the government or its spies partnered with cyber-crooks for espionage, but got no response.
Penchukov climbed back to the summit, leading IcedID – a crew infecting over 150,000 devices with malware, enabling various attacks including ransomware. He oversaw a hacker team scouring compromised computers for monetization strategies.
One 2020 victim was the University of Vermont Medical Center in the U.S., resulting in over $30 million (£23 million) in losses and suspending critical care for over two weeks, per prosecutors. Though no deaths occurred, the breach on 5,000 hospital computers posed severe risks to patients. Penchukov denies direct involvement, saying he confessed to lighten his sentence.
Now going by Andreev, he views his concurrent nine-year terms as excessive (hoping for early release) and must repay $54 million (£41.4 million) to victims.
From his perspective as a teen hacker turned pro, Western firms and individuals could absorb the hits, with insurance covering it all.
And this is the part most people miss: While Tank brushes off the impact, real victims tell a different story.
Take Lieber's Luggage, a family-owned shop in Albuquerque, New Mexico, robbed of $12,000 (£9,200) in one go. Owner Leslee remembers the sheer panic.
"It was pure disbelief and horror when the bank alerted us – we were clueless, and they were too," she shares.
Though a modest amount, it wrecked them: funds for rent, inventory, and payroll vanished. No savings to fall back on, and Leslee's elderly mother, handling accounts, blamed herself until the truth emerged.
"We felt all that – rage, frustration, dread," she adds.
Asked what they'd tell the culprits, they see it as pointless against hardened offenders.
"Nothing we say would faze him," Leslee says.
"I wouldn't waste a second on him," her husband Frank chimes in.
Penchukov admits he never considered victims then, and seems indifferent now. His sole remorse surfaces regarding a ransomware hit on a charity for disabled kids.
His main regret? Trusting fellow hackers, leading to arrests and informants.
"You can't forge real friendships in cyber-crime – tomorrow, your 'buddies' get nabbed and flip," he warns.
"Paranoia is hackers' constant companion," he adds. "But long-term success breeds slip-ups."
"Stick with it long enough, and you dull your edge," he reflects wistfully.
To underscore the underworld's betrayal, Penchukov cut ties with his former Jabber Zeus pal Maksim Yakubets after the Russian's 2019 outing and sanctions.
He notes the hacker scene's shift, with many shunning Yakubets and Evil Corp associates.
Once, he and "Aqua" (Yakubets' alias) partied in Moscow's fancy spots. "He had bodyguards – weird, like flaunting wealth," Penchukov says.
Shunning didn't stop Evil Corp; last year, the UK's National Crime Agency accused Yakubets' family of ties to the group's decade-long rampage, sanctioning 16 members total.
Unlike Penchukov, catching Yakubets or accomplices looks unlikely. A $5 million reward for tips means they'll stay put abroad, avoiding his extradition blunder.
Do you think hackers like Tank deserve any leniency for their 'charm,' or is it all a facade for ruthless exploitation? Should we view cyber-crime as a victimless pursuit covered by insurance, or does it inflict real, lasting harm? And what about those rumored ties to governments – are they fueling the chaos, or just wild speculation? Weigh in below – I'd love to hear your take!
