But money can certainly help with the negotiating.
All cyber-security firms said they never got hits for Kronos or UPAS-Kit.
The first Kronos detections came after his arrest. Go figure that! How do you charge someone for developing malware that never infected anyone?
https://securityintelligence.com/the-father-of-zeus-kronos-m...
https://myonlinesecurity.co.uk/an-employee-has-been-terminat... 2016 post referencing kronos with samples
https://www.virustotal.com/en/file/2ba17c2fbdd4127d7a63951b3... 2014 sample tagged as kronos
https://www.virustotal.com/en/file/3bd4b8caf9ae975bd41dbee1f... another 2014 kronos sample