DOJ says ransomware gang tapped into Russian government databases

A U.S. tribunal has sentenced Latvian hacker Deniss Zolotarjovs to much than 8 years successful situation pursuing his condemnation for carrying retired ransomware attacks.

The Justice Department accused the hacker of moving for a notorious Russian ransomware pack called Karakurt, which was led by erstwhile leaders of the Akira and Conti ransomware gangs, who were sanctioned by the U.S. Treasury for their alleged links to Russian intelligence.

Prosecutors said members of Karakurt targeted U.S. authorities entities with attacks that disrupted 911 exigency dispatch systems, and besides stole children’s wellness information. Zolotarjovs was liable for “escalating pressure” connected victims who resisted the gang’s ransom demands, the DOJ said.

While Zolotarjovs’ condemnation is notable successful itself, U.S. prosecutors said in their property release that the ransomware pack relied connected entree to Russian authorities databases and instrumentality enforcement connections to intimidate its victims, further underscoring the links betwixt the activities of cybercriminals and the Russian state.

Security researchers person agelong accused the Russian authorities of shielding ransomware gangs and malicious hackers from Western instrumentality enforcement, including by refusing to extradite its citizens accused of damaging hacks. U.S. officials successful caller years person said Russia has become a “safe haven” for cybercriminals, citing the menace from ransomware arsenic 1 of the apical nationalist information challenges facing the United States.

According to the DOJ, the Karakurt ransomware pack “fueled corruption” successful the Russian government; these ties to officials allowed the gang’s leaders to debar paying taxes to the state, and the pack regularly paid bribes to officials who exempted members from compulsory Russian subject service.

The Russian Foreign Ministry did not respond to TechCrunch’s petition for comment. 

Per the DOJ, the Karakurt pack targeted much than 54 companies, with astatine slightest $15 cardinal successful ransoms paid by the victims. Karakurt does not look to beryllium an progressive ransomware gang; immoderate operations alteration owners and names, sometimes to evade sanctions.

Zolotarjovs was arrested successful the state of Georgia successful 2023 and extradited to the United States successful August 2024. He aboriginal pleaded guilty.

(h/t @realhackhistory.org)