Sources: Russian security services used infrastructure created by criminal hackers, like Evgeniy Bogachev's ZeuS botnet, to gather intelligence
To the F.B.I., Evgeniy M. Bogachev is the most wanted cybercriminal in the world. The bureau has announced a $3 million bounty for his capture …
Context & Ripple Effects
The FBI has been chasing Evgeniy Bogachev since it put a $3M reward on his head in 2015 for the GameOver Zeus botnet, framing him as a financial cybercriminal. The new reporting reframes that case: sources say Russian security services used infrastructure like his ZeuS botnet to gather intelligence, meaning the bureau's top target may be operating under state protection rather than despite it.
That reading fits a pattern the coverage keeps circling back to — Evil Corp was sanctioned by the US Treasury over alleged FSB connections, and later ransomware figures like Mikhail Matveev drew combined charges, sanctions, and multi-million-dollar rewards. The line between Russian criminal crews and state intelligence work keeps getting harder to draw.
First-order effects
- Bogachev's status as the FBI's most wanted cybercriminal now carries an intelligence dimension: the bureau is effectively pursuing someone whose botnet allegedly served Russian security services, which helps explain why he remains at large inside Russia.
Second-order effects
- US authorities respond by escalating beyond indictments and bounties to financial pressure — the playbook already applied to Evil Corp and extended to figures like Matveev and the LockBit leader, where charges, sanctions, and rewards arrive as a package.
Third-order effects
- If criminal botnets function as state intelligence assets, Western attribution and deterrence policy must treat malware operators as proxies of the Russian state, collapsing the legal distinction between cybercrime cases and counterintelligence ones.
The trend: Russian cybercrime and state intelligence are converging into one ecosystem, and US responses are shifting from law-enforcement bounties toward sanctions-led statecraft.