Nicholas Moses, who allegedly operated the SmokeLoader malware, faces federal hacking charges in Vermont for stealing personal data from over 65,000 individuals. Moses is believed to have run a server in the Netherlands that sent out the malware and collected stolen data. He reportedly sold stolen credentials for $1 to $5 each. SmokeLoader, a form of malware commonly used by Russian cybercriminals, has a wide range of functions including stealing credentials and launching DDoS attacks.

CBI arrests hacker for targeting Delhi Jal Board customers using malware | Delhi News
Indian cyber hacker Bittu Kumar has been arrested by the Central Bureau of Investigation (CBI) for running a malware scam using the Delhi Jal Board