DOJ Reveals Karakurt Ransomware Gang Accessed Russian Government Databases, Member Sentenced
A U.S. court sentenced Latvian national
Karakurt's access to Russian government and law enforcement databases, corroborated across three outlets citing the DOJ sentencing release, and its payment of bribes for military draft exemptions imply functional integration with state structures, not the passive tolerance Moscow typically extends to domestic cybercriminals. The gang's descent from Conti suggests these arrangements reflect inherited relationships within Russia's security bureaucracy rather than improvised opportunism. The bribery and database access may instead reflect individual officials selling services for personal enrichment, leaving Moscow's posture indifferent or hostile rather than enabling. Within 18 months of continued prosecution and cooperation, analogous state-criminal database access is likely to surface in at least one additional Russian-nexus ransomware group as investigators leverage Karakurt to map broader state-criminal financial flows.
4 sources
- DOJ says ransomware gang tapped into Russian government databases -
TechCrunch - Latvian national sentenced for ransomware attacks run by former Conti leaders -
CyberScoop - Karakurt Ransomware Negotiator Sentenced to Prison -
SecurityWeek - Member of Russian Cybercrime Group Sentenced in Ohio -
U.S. Department of Justice (SDOH)