Connect with us

Hi, what are you looking for?

SecurityWeekSecurityWeek

Cybercrime

Russian Man Extradited to US for Laundering Ryuk Ransomware Money

A Russian national has been extradited from the Netherlands to the United States, where he faces charges related to his alleged role in the Ryuk ransomware operation.

The suspect is 29-year-old Denis Mihaqlovic Dubnikov, whose trial is scheduled to begin on October 4.

A Russian national has been extradited from the Netherlands to the United States, where he faces charges related to his alleged role in the Ryuk ransomware operation.

The suspect is 29-year-old Denis Mihaqlovic Dubnikov, whose trial is scheduled to begin on October 4.

According to authorities, cybercriminals who had been using the Ryuk ransomware to extort money from organizations relied on the man to launder the cryptocurrency received from victims.

The DoJ said Dubnikov was active between August 2018 and August 2021, helping launder significant amounts of money through various types of financial transactions. The goal was to hide the ownership, source, location and control of the ransom payments.

The DoJ said Dubnikov and his co-conspirators laundered at least $70 million, with Dubnikov himself allegedly laundering more than $400,000 in July 2019.

The Russian national was arrested in the Netherlands in November 2021 and he was extradited to the US this week.

Advertisement. Scroll to continue reading.

He has been charged by a federal grand jury in Portland and he faces up to 20 years in prison and a fine of $500,000.

The Ryuk file-encrypting ransomware emerged in 2018 and for a few years it was one of the most active operations, until it was gradually replaced by Conti over the course of 2020 and 2021. Ryuk was often observed targeting industrial organizations, and in early 2021 researchers estimated that the Ryuk criminal enterprise had been worth $150 million.

Related: Six Arrested for Roles in Clop Ransomware Operation

Related: Ransomware Affiliate Arrested in Romania

Related: U.S. Charges Two Suspected Major Ransomware Operators

Written By

Eduard Kovacs (@EduardKovacs) is senior managing editor at SecurityWeek. He worked as a high school IT teacher before starting a career in journalism in 2011. Eduard holds a bachelor’s degree in industrial informatics and a master’s degree in computer techniques applied in electrical engineering.

Daily Briefing Newsletter

Subscribe to the SecurityWeek Email Briefing for the latest cybersecurity threats, trends, and expert insights.

Click to comment

Trending

Daily Briefing Newsletter

Subscribe to the SecurityWeek Email Briefing to stay informed on the latest threats, trends, and technology, along with insightful columns from industry experts.

Join this live webinar as we break down why email-layer defenses alone can't keep pace with the modern phishing ecosystem, how agentic AI is changing the capacity equation for security teams, and more.

Register

This year's summit will help organizations learn how to utilize tools, controls, and design models needed to properly secure cloud environments. Interact with leading solution providers and other end users facing similar challenges in securing a variety of cloud deployments.

Register

People on the Move

Tracey Mustacchio has joined Everfox as Chief Marketing Officer.

Mark Carter has been appointed Chief Information Security Officer at Socure.

Spektrum Labs has named Mark Cravotta Chief Operating Officer.

More People On The Move

Expert Insights

Four decades of incident response experience suggest that exploits are often the symptom, not the root cause, of today’s cybersecurity failures.

Daily Briefing Newsletter

Subscribe to the SecurityWeek Email Briefing to stay informed on the latest cybersecurity news, threats, and expert insights. Unsubscribe at any time.