Zeus is a huge success in the criminal circles especially for the sales model, as malware as service, implemented by its authors on many underground sites. Zeus has been re-engineered several times by cyber criminals that adapted its structure to specific purposes and context, leaving unchanged its core capabilities of stealing banking credentials of victims. McAfee Global Threat Intelligence report indicates the “Poetry Group” is one of the most active in this sense, the collective compromised 27 Japanese government offices across three distinct campaigns and targeted around 43 government offices in Poland.
Source: https://thehackernews.com/2013/02/what-does-poetry-with-citadel-trojan.html