Adversary Intelligence — 2026-05-07

DOJ Reveals Karakurt Ransomware Gang Accessed Russian Government Databases, Member Sentenced

A U.S. court sentenced Latvian national Deniss Zolotarjovs to 8.5 years in prison for his role as Karakurt's ransom negotiator and extortion strategist, SecurityWeek reported May 5. The DOJ's sentencing press release stated that Karakurt members accessed Russian government databases and law enforcement networks to intimidate victims, and paid bribes to Russian officials who exempted gang members from military service. SecurityWeek attributed $56 million in total losses to at least 53 victims; TechCrunch reported at least $15 million in ransoms paid across more than 54 targets, the two outlets using different damage metrics. Zolotarjovs was arrested in Georgia in December 2023, extradited to the United States in August 2024, and pleaded guilty in July 2025.

Analysis
Karakurt's access to Russian government and law enforcement databases, corroborated across three outlets citing the DOJ sentencing release, and its payment of bribes for military draft exemptions imply functional integration with state structures, not the passive tolerance Moscow typically extends to domestic cybercriminals. The gang's descent from Conti suggests these arrangements reflect inherited relationships within Russia's security bureaucracy rather than improvised opportunism. The bribery and database access may instead reflect individual officials selling services for personal enrichment, leaving Moscow's posture indifferent or hostile rather than enabling. Within 18 months of continued prosecution and cooperation, analogous state-criminal database access is likely to surface in at least one additional Russian-nexus ransomware group as investigators leverage Karakurt to map broader state-criminal financial flows.
4 sources
  1. DOJ says ransomware gang tapped into Russian government databases - TechCrunch
  2. Latvian national sentenced for ransomware attacks run by former Conti leaders - CyberScoop
  3. Karakurt Ransomware Negotiator Sentenced to Prison - SecurityWeek
  4. Member of Russian Cybercrime Group Sentenced in Ohio - U.S. Department of Justice (SDOH)

View in full brief →

UNCLASSIFIED // OPEN SOURCE