Russian money launderer for TrickBot ransomware group sentenced to two years

April 3, 20262 min read2 sources
Share:
Russian money launderer for TrickBot ransomware group sentenced to two years

A Russian national has been sentenced to two years in federal prison for his role in an international money laundering conspiracy that supported the notorious TrickBot cybercrime group. Denis Dubnikov, 30, pleaded guilty to processing cryptocurrency ransom payments extorted from victims of ransomware attacks.

According to the U.S. Department of Justice, Dubnikov was responsible for laundering over $400,000 in proceeds from BitPaymer ransomware attacks between 2018 and 2021. These attacks specifically impacted at least 72 U.S. companies. This activity was part of a broader scheme where he laundered over $7 million for the TrickBot syndicate, which also deployed the Conti and Ryuk ransomware strains against hospitals, schools, and government entities.

The TrickBot malware initially emerged as a banking trojan but evolved into a highly versatile tool for cybercriminals. It provided initial access to corporate networks, allowing attackers to steal credentials, move laterally through systems, and ultimately deploy ransomware payloads. Dubnikov’s role was critical in converting the illicit cryptocurrency payments back into cash for the attackers, making their operations profitable.

Dubnikov was arrested in Mexico in November 2021 and extradited to the U.S. the following year. Law enforcement officials emphasized that the sentencing is part of a larger strategy to dismantle the financial infrastructure that fuels cybercrime. “This sentence demonstrates the Justice Department’s commitment to disrupting the financial ecosystem that allows ransomware to flourish,” said Assistant Attorney General Kenneth A. Polite, Jr.

Share:

// SOURCES

// RELATED

Apple expands iOS 18.7.7 update to block sophisticated DarkSword exploit

Apple has broadened the availability of iOS 18.7.7, patching critical zero-click vulnerabilities exploited by the sophisticated DarkSword surveillance

2 min readApr 3

Critical flaw in Langflow AI platform under attack

A critical code injection vulnerability in the Langflow AI framework is under active attack, with threat actors exploiting it within hours of disclosu

2 min readApr 2

WhatsApp warns iPhone users of fake app distributing potent spyware

Meta has warned iPhone users of a fake WhatsApp application designed by an Italian surveillance firm to install spyware that can steal data and record

2 min readApr 2

FCC seeks to expand security blacklist, potentially impacting future router sales

The FCC is seeking public comment on expanding its "Covered List" criteria, a move that could pave the way for future restrictions on foreign-made rou

2 min readApr 2