In the middle of last month, and after the investigation of a group of cybercriminals who used ZeuS as a way to enrich themselves, we obtained information about how they planned to launder that money. According to the instructions found (in Russian) his plan was based on creating seller accounts on a photo selling site, to later create buyer accounts with the aim of laundering the money and recovering it through WebMoney.The group responsible for this Trojan, probably of Russian origin, had certain notes on money laundering that seem to have been taken from a post of a well-known carding forum, written in January 2011. This same post has been replicated in different forums of the same theme in February and March, respectively.
Full content in original S21Sec source