Dariy Pankov faces up to 47 years in prison on charges linked to credential sales and offering access to the NLBrute malware.

The suspect's group accumulated at least 50 million unique credentials from "millions of potential victims" worldwide, the DOJ said.