Alleged SmokeLoader malware operator facing federal charges in Vermont

An alleged operator of the SmokeLoader malware, Nicholas Moses (alias "scrublord"), has been charged for operating a command-and-control server that allegedly infected thousands of computers and stole personal information and passwords from over 65,000 victims; he purportedly sold stolen credentials and maintained a large database of stolen logs. The report additionally summarizes SmokeLoader's modular capabilities (credential theft, loaders, DDoS, keylogging), references its long-standing presence on underground forums, and describes Europol's Operation Endgame which targeted SmokeLoader customers and contributed to arrests and server takedowns.