Between 2009 and 2015, the two individuals – Aleksandr Skorodumov, 33, of Lithuania, and Pavel Stassi, 30, of Estonia – served as administrators for an organization that offered bulletproof hosting to malware families such as Citadel, SpyEye, Zeus, and the Blackhole exploit kit.

The organization, which was founded and led by Russian nationals Aleksandr Grichishkin and Andrei Skvortsov, both 34, rented domains, IP addresses, and servers to cybercriminals looking to infect computers, create botnets, and compromise banking credentials.