How is this a problem? if you cause material damages to Americans and you then go to the US the country is going to come after you.
Why would the US not protect its citizens to the best of its ability and prosecute people who harmed them, even if they harmed them from a place that wasn't the US. We're talking about global financial crimes, they don't know any borders to begin with.
If you kill someone outside of the US, and then you travel to the US, I'd be concerned if you wouldn't get arrested
I could be wrong, but I don't think the federal government has ever claimed that any Americans were infected with Kronos.
It's a stretch.
World police strikes again.
Now that I'm thinking about it more, I'd be upset if they didn't arrest him while he were here.
In fact, the DOJ press release specifically names a bunch of countries that aren't the US https://www.justice.gov/usao-edwi/pr/man-charged-his-role-cr...
>According to publically available information, since it was created, Kronos has been configured to exfiltrate user credentials associated with banking systems located in Canada, Germany, Poland, France, and the United Kingdom, among others countries.
Of course, given the nature of the malware it's very likely that at least someone in the US was affected.