A Bulgarian man pleaded not guilty Thursday to federal charges that he used sophisticated malware designed to steal banking credentials and other confidential information from infected computers of two western Pennsylvania companies and two California firms.