Aside from the nine-year jail sentence and another three years of supervised release, Penchukov was also ordered by the U.S. government to provide over $54 million in restitution and nearly $20 million in forfeiture funds.
Attackers have leveraged a malicious ZIP archive file with a Windows shortcut, which when executed triggers a clean PDF file and eventually runs Jellyfish Loader.