Nikita Kuzmin, 28, of Russia, created Gozi in 2007 and marketed it on underground hacking forums using the "76" nickname.

The malware was the first marketed as malware as a service and Kuzmin would rent it for $500 per month. He was arrested in the United States in 2010. Kuzmin reached a cooperation agreement with the prosecutors and pleaded guilty later in 2011.

The Gozi banking trojan worked by using "Web injects" modules which tapped into Web browser processes on infected computers. These Web injects would overlay fake Web pages when the user would visit a banking portal.

Once the criminals received the log in info, they would engage in fraudulent transactions.

Kuzmin was sentenced to time served (37 months) and ordered to pay a fine of $6,934,979 as damages.

He had two accomplices, one of which is still fighting extradition. His other accomplice was also sentenced to time served which was 21 months.

Source: SoftPedia