NZ Herald
  • Home
  • Latest news
  • Herald NOW
  • Video
  • New Zealand
  • Sport
  • World
  • Business
  • Entertainment
  • Podcasts
  • Quizzes
  • Opinion
  • Lifestyle
  • Travel
  • Viva
  • Weather

Subscriptions

  • Herald Premium
  • Viva Premium
  • The Listener
  • BusinessDesk

Sections

  • Latest news
  • New Zealand
    • All New Zealand
    • Crime
    • Politics
    • Education
    • Open Justice
    • Scam Update
    • The Great NZ Road Trip
  • Herald NOW
  • On The Up
  • World
    • All World
    • Australia
    • Asia
    • UK
    • United States
    • Middle East
    • Europe
    • Pacific
  • Business
    • All Business
    • MarketsSharesCurrencyCommoditiesStock TakesCrypto
    • Markets with Madison
    • Media Insider
    • Business analysis
    • Personal financeKiwiSaverInterest ratesTaxInvestment
    • EconomyInflationGDPOfficial cash rateEmployment
    • Small business
    • Business reportsMood of the BoardroomProject AucklandSustainable business and financeCapital markets reportAgribusiness reportInfrastructure reportDynamic business
    • Deloitte Top 200 Awards
    • Deloitte Fast 50
    • Generate wealth weekly
    • CompaniesAged CareAgribusinessAirlinesBanking and financeConstructionEnergyFreight and logisticsHealthcareManufacturingMedia and MarketingRetailTelecommunicationsTourism
  • Opinion
    • All Opinion
    • Analysis
    • Editorials
    • Business analysis
    • Premium opinion
    • Letters to the editor
  • Politics
  • Sport
    • All Sport
    • OlympicsParalympics
    • RugbySuper RugbyNPCAll BlacksBlack FernsRugby sevensSchool rugby
    • CricketBlack CapsWhite Ferns
    • Racing
    • NetballSilver Ferns
    • LeagueWarriorsNRL
    • FootballWellington PhoenixAuckland FCAll WhitesFootball FernsEnglish Premier League
    • GolfNZ Open
    • MotorsportFormula 1
    • Boxing
    • UFC
    • BasketballNBABreakersTall BlacksTall Ferns
    • Tennis
    • Cycling
    • Athletics
    • SailingAmerica's CupSailGP
    • Rowing
  • Lifestyle
    • All Lifestyle
    • Viva - Food, fashion & beauty
    • Society Insider
    • Royals
    • Sex & relationships
    • Food & drinkRecipesRecipe collectionsRestaurant reviewsRestaurant bookings
    • Health & wellbeing
    • Fashion & beauty
    • Pets & animals
    • The Selection - Shop the trendsShop fashionShop beautyShop entertainmentShop giftsShop home & living
    • Milford's Investing Place
  • Entertainment
    • All Entertainment
    • TV
    • MoviesMovie reviews
    • MusicMusic reviews
    • BooksBook reviews
    • Culture
    • ReviewsBook reviewsMovie reviewsMusic reviewsRestaurant reviews
  • Travel
    • All Travel
    • News
    • New ZealandNorthlandAucklandWellingtonCanterburyOtago / QueenstownNelson-TasmanBest NZ beaches
    • International travelAustraliaPacific IslandsEuropeUKUSAAfricaAsia
    • Rail holidays
    • Cruise holidays
    • Ski holidays
    • Luxury travel
    • Adventure travel
  • Kāhu Māori news
  • Environment
    • All Environment
    • Our Green Future
  • Talanoa Pacific news
  • Property
    • All Property
    • Property Insider
    • Interest rates tracker
    • Residential property listings
    • Commercial property listings
  • Health
  • Technology
    • All Technology
    • AI
    • Social media
  • Rural
    • All Rural
    • Dairy farming
    • Sheep & beef farming
    • Horticulture
    • Animal health
    • Rural business
    • Rural life
    • Rural technology
    • Opinion
    • Audio & podcasts
  • Weather forecasts
    • All Weather forecasts
    • Kaitaia
    • Whangārei
    • Dargaville
    • Auckland
    • Thames
    • Tauranga
    • Hamilton
    • Whakatāne
    • Rotorua
    • Tokoroa
    • Te Kuiti
    • Taumaranui
    • Taupō
    • Gisborne
    • New Plymouth
    • Napier
    • Hastings
    • Dannevirke
    • Whanganui
    • Palmerston North
    • Levin
    • Paraparaumu
    • Masterton
    • Wellington
    • Motueka
    • Nelson
    • Blenheim
    • Westport
    • Reefton
    • Kaikōura
    • Greymouth
    • Hokitika
    • Christchurch
    • Ashburton
    • Timaru
    • Wānaka
    • Oamaru
    • Queenstown
    • Dunedin
    • Gore
    • Invercargill
  • Meet the journalists
  • Promotions & competitions
  • OneRoof property listings
  • Driven car news

Puzzles & Quizzes

  • Puzzles
    • All Puzzles
    • Sudoku
    • Code Cracker
    • Crosswords
    • Cryptic crossword
    • Wordsearch
  • Quizzes
    • All Quizzes
    • Morning quiz
    • Afternoon quiz
    • Sports quiz

Regions

  • Northland
    • All Northland
    • Far North
    • Kaitaia
    • Kerikeri
    • Kaikohe
    • Bay of Islands
    • Whangarei
    • Dargaville
    • Kaipara
    • Mangawhai
  • Auckland
  • Waikato
    • All Waikato
    • Hamilton
    • Coromandel & Hauraki
    • Matamata & Piako
    • Cambridge
    • Te Awamutu
    • Tokoroa & South Waikato
    • Taupō & Tūrangi
  • Bay of Plenty
    • All Bay of Plenty
    • Katikati
    • Tauranga
    • Mount Maunganui
    • Pāpāmoa
    • Te Puke
    • Whakatāne
  • Rotorua
  • Hawke's Bay
    • All Hawke's Bay
    • Napier
    • Hastings
    • Havelock North
    • Central Hawke's Bay
    • Wairoa
  • Taranaki
    • All Taranaki
    • Stratford
    • New Plymouth
    • Hāwera
  • Manawatū - Whanganui
    • All Manawatū - Whanganui
    • Whanganui
    • Palmerston North
    • Manawatū
    • Tararua
    • Horowhenua
  • Wellington
    • All Wellington
    • Kapiti
    • Wairarapa
    • Upper Hutt
    • Lower Hutt
  • Nelson & Tasman
    • All Nelson & Tasman
    • Motueka
    • Nelson
    • Tasman
  • Marlborough
  • West Coast
  • Canterbury
    • All Canterbury
    • Kaikōura
    • Christchurch
    • Ashburton
    • Timaru
  • Otago
    • All Otago
    • Oamaru
    • Dunedin
    • Balclutha
    • Alexandra
    • Queenstown
    • Wanaka
  • Southland
    • All Southland
    • Invercargill
    • Gore
    • Stewart Island
  • Gisborne

Media

  • Video
    • All Video
    • NZ news video
    • Herald NOW
    • Business news video
    • Politics news video
    • Sport video
    • World news video
    • Lifestyle video
    • Entertainment video
    • Travel video
    • Markets with Madison
    • Kea Kids news
  • Podcasts
    • All Podcasts
    • The Front Page
    • On the Tiles
    • Ask me Anything
    • The Little Things
  • Cartoons
  • Photo galleries
  • Today's Paper - E-editions
  • Photo sales
  • Classifieds

NZME Network

  • Advertise with NZME
  • OneRoof
  • Driven Car Guide
  • BusinessDesk
  • Newstalk ZB
  • Sunlive
  • ZM
  • The Hits
  • Coast
  • Radio Hauraki
  • The Alternative Commentary Collective
  • Gold
  • Flava
  • iHeart Radio
  • Hokonui
  • Radio Wanaka
  • iHeartCountry New Zealand
  • Restaurant Hub
  • NZME Events

SubscribeSign In

Advertisement
Advertise with NZME.
Home / World

Malware mastermind who rigged ATMs to spew cash caught in Spain

By Charlie Devereux
Bloomberg·
26 Mar, 2018 08:07 PM3 mins to read

Subscribe to listen

Access to Herald Premium articles require a Premium subscription. Subscribe now to listen.
Already a subscriber?  

Listening to articles is free for open-access content—explore other articles or learn more about text-to-speech.
‌
Save
    Share this article
Cash is picked up from an ATM. Photo / Twitter, El Mundo video

Cash is picked up from an ATM. Photo / Twitter, El Mundo video

The mastermind behind malware attacks that programmed ATMs to spit out cash on demand and caused more than €1 billion in losses has been arrested in Spain.

The leader of a criminal gang that carried out the malware attacks known as Carbanak and Cobalt was detained in Alicante following an investigation by Spanish police, Europol and the US Federal Bureau of Investigation.

Spain's Interior Ministry named the suspect as Denis K, a Ukrainian national.

Europol, the European Union agency for law enforcement cooperation, said that Romanian, Belorussian and Taiwanese authorities also took part in the manhunt.

The organised crime group has been operating since 2013, targeting over 100 financial institutions around the world in heists of as much as €10 million per operation.

Advertisement
Advertise with NZME.
Advertisement
Advertise with NZME.

The malware they created could instruct ATMs to dispense cash at a pre-determined time, with gang members waiting by the machines collecting the money.

They also used the e-payment network to transfer money from banks into criminal accounts, and used access to databases to inflate bank account balances in order to collect the money using mules, Europol said.

Europol said the profits were laundered using cryptocurrencies to buy luxury houses and cars.

Advertisement
Advertise with NZME.

Neither Europol or the Spanish police provided information about other members of the gang.

Spain's Interior Ministry said Denis K was operating from Spain and had accumulated about 15,000 bitcoins (US$120 million).

He accessed financial platforms in Gibraltar and the UK to charge prepaid cards that he then used in Spain to acquire luxury goods, including cars and houses. Spanish police believe that the amounts he had to spend on upgrading systems for new attacks and in disputes with Russian mafia mean that at one stage he may have held considerably more in cryptocurrency.

The cyberattacks mainly targeted banks in Russia, penetrating practically all of the country's financial system, the Interior Ministry said. In Spain, attacks took place in Madrid mainly in the first quarter of 2017, resulting in the theft of about €500,000. The gang worked with Russian mafia until 2015 and then with criminal groups from Moldova after that, the ministry said.

Discover more

World

Grumpy garçon just being 'French'

26 Mar 06:19 PM
World

Kremlin line on spy poisoning works in Russia

26 Mar 07:03 PM
World

Data row threatens Silicon Valley giants

26 Mar 07:26 PM
World

Orlando shooter's father was FBI informant

26 Mar 07:44 PM
Spain's Interior Ministry said Denis K was operating from Spain and had accumulated about 15,000 bitcoins (US$120 million).
Spain's Interior Ministry said Denis K was operating from Spain and had accumulated about 15,000 bitcoins (US$120 million).

Denis K, working with three other gang members, sent out malware-infected emails to bank employees. If the employees opened the emails, the gang was able to take control remotely of their computers and access banks' internal databases and systems.

The gang members didn't know each other and made contact through Internet chat rooms, said Carlos Yuste, a Spanish police chief inspector who helped lead the operation. Yuste said it's unlikely that the rest of the gang will be able to continue operating after its mastermind was captured.

"The head has been cut off," Yuste said by phone. "I'm sure there are other operations like this, but not many."

The arrest marks at least the second time in a year that international cooperation in law enforcement has brought down a cyber-crime operation.

In July, Dutch police working with Europol, the FBI and the US Drug Enforcement Agency shut down the operations of AlphaBay and Hansa, two markets for the sale of drugs, firearms and malware that operated on the so-called dark web.

- Bloomberg

Advertisement
Advertise with NZME.
Save
    Share this article

Latest from World

Premium
World

Finding stillness in one of the world’s biggest cities

World

AI army of the past: How Venezuela is drafting saints and legends for war

World

Inside Gaza City where families face a difficult choice


Sponsored

Kiwi campaign keeps on giving

Advertisement
Advertise with NZME.

Latest from World

Premium
Premium
Finding stillness in one of the world’s biggest cities
World

Finding stillness in one of the world’s biggest cities

Despite crowded streets and train stations, there's quiet places in the heart of the city.

09 Sep 05:05 PM
AI army of the past: How Venezuela is drafting saints and legends for war
World

AI army of the past: How Venezuela is drafting saints and legends for war

09 Sep 05:00 PM
Inside Gaza City where families face a difficult choice
World

Inside Gaza City where families face a difficult choice

09 Sep 05:00 PM


Kiwi campaign keeps on giving
Sponsored

Kiwi campaign keeps on giving

07 Sep 12:00 PM
NZ Herald
  • About NZ Herald
  • Meet the journalists
  • Newsletters
  • Classifieds
  • Help & support
  • Contact us
  • House rules
  • Privacy Policy
  • Terms of use
  • Competition terms & conditions
  • Our use of AI
Subscriber Services
  • NZ Herald e-editions
  • Daily puzzles & quizzes
  • Manage your digital subscription
  • Manage your print subscription
  • Subscribe to the NZ Herald newspaper
  • Subscribe to Herald Premium
  • Gift a subscription
  • Subscriber FAQs
  • Subscription terms & conditions
  • Promotions and subscriber benefits
NZME Network
  • The New Zealand Herald
  • The Northland Age
  • The Northern Advocate
  • Waikato Herald
  • Bay of Plenty Times
  • Rotorua Daily Post
  • Hawke's Bay Today
  • Whanganui Chronicle
  • Viva
  • NZ Listener
  • Newstalk ZB
  • BusinessDesk
  • OneRoof
  • Driven Car Guide
  • iHeart Radio
  • Restaurant Hub
NZME
  • About NZME
  • NZME careers
  • Advertise with NZME
  • Digital self-service advertising
  • Book your classified ad
  • Photo sales
  • NZME Events
  • © Copyright 2025 NZME Publishing Limited
TOP