Ransomware Negotiator Deniss Zolotarjovs Sentenced to 102 Months in U.S. Prison
Summary
Deniss Zolotarjovs was sentenced to 102 months after pleading guilty to money laundering and wire fraud. Prosecutors say he helped ransomware groups extort more than 53 companies, causing $56 million in losses.
Key points
- Zolotarjovs pleaded guilty in July 2025 to money laundering and wire fraud; the judge imposed a 102-month sentence.
- Prosecutors say he analyzed stolen victim data and used it to pressure companies during ransom negotiations, receiving about 10% of ransoms.
- Prosecutors link his work from June 2021 to March 2023 to extortion of more than 53 companies and at least $56 million in losses, including nearly $3 million in ransom payments.
- In one case, prosecutors say he urged associates to leak pediatric health data and sent samples to patients to pressure a healthcare victim.
- Investigators said the network used names including Karakurt, Conti, Royal, TommyLeaks, SchoolBoys, and Akira; the FBI accessed a chat server used by members.
- Prosecutors said the organization remains active; the article reports researchers tied more than 100 attacks in 2025 to its Akira operation.
Article Details
- Event Type
- Sentencing of a ransomware affiliate after he pleaded guilty to money laundering and wire fraud.
- Impact
- Prosecutors said Deniss Zolotarjovs helped extort more than 53 companies between about June 2021 and March 2023, contributing to at least $56 million in losses, including nearly $3 million in ransom payments. They said he used stolen pediatric health information to pressure a healthcare victim. The article also reports that a government entity’s 911 system was forced offline. Zolotarjovs was sentenced to 102 months in prison.
People
Threat Actors
AkiraA ransomware brand name the article says was used by the criminal network associated with Zolotarjovs; researchers reportedly tied more than 100 attacks in 2025 to the operation.ContiThe article identifies Conti as a ransomware gang and one of the names used by the criminal network associated with Zolotarjovs.Deniss ZolotarjovsRansomware affiliate and extortion negotiator. He pleaded guilty to money laundering and wire fraud; prosecutors said he helped extort victims and use stolen pediatric health information as leverage.KarakurtRansomware and data-extortion operation prosecutors identified as the group Zolotarjovs worked for. The article says the group used several names, including Conti, Royal, TommyLeaks, SchoolBoys, and Akira.RoyalOne of the names the article says the criminal network associated with Zolotarjovs used when extorting victims.SchoolBoysOne of the names the article says the criminal network associated with Zolotarjovs used when extorting victims.TommyLeaksOne of the names the article says the criminal network associated with Zolotarjovs used when extorting victims.
Malware
Countries
GeorgiaDeniss Zolotarjovs pleaded guilty in July 2025 to money laundering and wire fraud charges after being arrested in the country of Georgia.RussiaThe DOJ argued for a lengthier sentence, telling the court that once his sentence is complete, Zolotarjovs will likely return to Russia and continue his ransomware work.United StatesA Latvian affiliate, Deniss Zolotarjovs, was sentenced to over eight years in U.S.