A 28-year-old Romanian man is facing 5 years in prison after pleading guilty to a charge of conspiracy to commit fraud related to spam. Cornel Ionut Tonita was involved in a phishing ring with two other men. The men set up fake websites designed to look like the account login pages of such companies as Citibank, Wells Fargo and Ebay. They stole passwords and financial information and passed it along to others who used it to make fake credit cards.

Tonita admitted to using email harvesting software and sending spam designed to lure people to the fake sites. Authorities say he sent a file of almost 10,000 addresses to one of the other men.

All three men have been convicted. One of them, Ovidiu-Ionut Nicola-Roman, was the first foreign national ever convicted of phishing in the U.S. He was sentenced to 4 years in prison. Tonita will be formally sentenced in April.

Phishing has become a multi-million dollar industry for cybercriminals and experts say there attacks are becoming more and more targeted and sophisticated.