Russian money launderer for TrickBot ransomware group sentenced to two years

April 3, 20262 min read2 sources
Share:
Russian money launderer for TrickBot ransomware group sentenced to two years

A Russian national has been sentenced to two years in federal prison for his role in cybercrime operations targeting U.S. companies. The individual pleaded guilty, admitting that a phishing botnet he managed was used to facilitate ransomware attacks.

According to the U.S. Department of Justice, the phishing botnet managed by the individual was used to launch BitPaymer ransomware attacks. These attacks specifically impacted at least 72 U.S. companies. This activity was part of a broader scheme that deployed ransomware against various entities, including hospitals, schools, and government organizations.

The BitPaymer ransomware, active for several years, is known for targeting corporate networks. Phishing botnets, like the one managed by the defendant, often provide the initial access for such attacks, allowing cybercriminals to infiltrate systems, steal data, and ultimately deploy the ransomware payload. The individual's role in managing this infrastructure was a critical component in enabling these attacks and making the criminal operations successful.

The individual was apprehended and brought to the U.S. to face charges. Law enforcement officials emphasized that the sentencing is part of a larger strategy to dismantle the technical infrastructure that fuels cybercrime. This sentence demonstrates a commitment to disrupting the ecosystem that allows ransomware to flourish by holding operators of such infrastructure accountable.

Share:

// SOURCES

// RELATED

NIST scales back vulnerability data enrichment after 263% surge in submissions

NIST is limiting detailed analysis in its National Vulnerability Database (NVD) due to a massive increase in submissions, impacting security teams.

2 min readApr 18

Three Microsoft Defender zero-days actively exploited; two still unpatched

Security firm Huntress warns of active exploitation of three Microsoft Defender zero-days, codenamed BlueHammer, RedSun, and UnDefend. Two remain unpa

6 min readApr 18

London healthcare faces months of disruption after ransomware attack on key supplier

A major ransomware attack on pathology provider Synnovis has caused severe, ongoing disruption to London hospitals, highlighting critical supply chain

6 min readApr 18

Most 'AI SOCs' are just faster triage, and that's not enough

Many AI security tools only speed up alert analysis, failing to reduce analyst workload. Experts argue real gains require AI that automates response a

2 min readApr 17