Organization Chart Reveals Chrono Pay’s Links to Shady Internet Projects
Summary: Leaked emails and documents from ChronoPay, described as Russia's largest online payments processor, show co-founder Pavel Vrublevsky authorizing a payment of 37,350 Russian Rubles (about $1,200) in August 2010 for a multi-user license of an Intranet service called MegaPlan, which employees used to track payment processing, order volumes and advertising for what the article calls the company's "black" operations. The MegaPlan account included an organization chart of divisions handling payments for rogue anti-virus software, violent adult sites and knockoff prescription drugs sold through hundreds of sites tied to Rx-Promotion.com, and many employees had messages auto-forwarded to their real ChronoPay email accounts.
Key Takeaway: A UCSB study cited in the article found three rogue anti-virus distribution services all processed payments through ChronoPay, and a UC San Diego paper found Rx-Promotion-branded sites were the most actively promoted via spam among more than 30 illicit pharmacy programs - a payment processor sitting at the center of both.
Read the original at Krebs on Security ↗
- Topics
- Cybercrime & Law Enforcement
- Related
- Gootloader Malware Disrupted After Infecting 25,000 Computers Cyber Risks · Nov 13, 2026354 dark web vendors and buyers arrested in Operation Tor Nado Cyber Risks · Nov 13, 2026Law Enforcement Disrupts Gootloader, CastleRAT, and StealC Infrastructure Cyber Risks · Nov 13, 2026