Latvian National Sentenced to 102 Months for Ransomware Extortions
Summary
Deniss Zolotarjovs was sentenced to 102 months for helping a ransomware organization pressure victims. Authorities say the crew extorted nearly $16 million in confirmed ransom payments and targeted more than 54 companies.
Key points
- A federal judge sentenced Zolotarjovs to 102 months in prison; he had pleaded guilty to money laundering and wire fraud.
- From June 2021 to August 2023, he helped a ransomware organization led by former Conti leaders pressure victims and extort payments.
- The organization targeted more than 54 companies and extorted nearly $16 million in confirmed ransom payments.
- Court records say Zolotarjovs urged co-conspirators to leak or sell stolen pediatric health records, and sensitive data was sent to hundreds of patients.
- The crew used multiple names, including Conti, Karakurt, Royal, Akira, TommyLeaks and SchoolBoys Ransomware.
- Officials estimate the group’s crimes caused hundreds of millions of dollars in losses; a government entity’s 911 system was also forced offline.
Article Details
- Event Type
- Criminal prosecution and sentencing of a participant in ransomware extortion operations associated with former Conti leaders.
- Impact
- Deniss Zolotarjovs was sentenced to 102 months in prison after pleading guilty to money laundering and wire fraud. The crew extorted nearly $16 million in confirmed ransom payments from more than 54 companies. Stolen pediatric health records were disclosed to hundreds of patients. Officials estimated the crimes caused hundreds of millions of dollars in losses; a government entity's 911 system was also forced offline.
People
Threat Actors
AkiraName used in ransom notes by the ransomware crew during Zolotarjovs’s involvement.Black BastaIdentified in the article as one of three subgroups under which Conti members rebranded after Conti disbanded.BlacksuitThe article says Quantum rebranded to Royal and then to BlackSuit in 2024.ContiRansomware group whose former leaders led the crew in operations involving Zolotarjovs; the crew used this name in ransom notes.Deniss ZolotarjovsThe article reports that he pressured ransomware victims and helped facilitate extortions tied to former Conti leaders from June 2021 to August 2023. He pleaded guilty to money laundering and wire fraud and was sentenced to 102 months in prison.KarakurtName used in ransom notes by the ransomware crew during Zolotarjovs’s involvement.QuantumIdentified in the article as one of three subgroups under which Conti members rebranded after Conti disbanded; the article says it quickly rebranded to Royal and later to BlackSuit.RoyalName used in ransom notes by the ransomware crew during Zolotarjovs’s involvement.SchoolBoysName used in ransom notes by the ransomware crew during Zolotarjovs’s involvement.TommyLeaksName used in ransom notes by the ransomware crew during Zolotarjovs’s involvement.ZeonIdentified in the article as one of three subgroups under which Conti members rebranded after Conti disbanded.
Countries
GeorgiaZolotarjovs was arrested in Georgia in December 2023, extradited to the U.S.RussiaThe Russian ransomware crew was prolific and spread across multiple teams, relying on companies registered in Russia, Europe and the United States to conceal its operations.United StatesZolotarjovs was arrested in Georgia in December 2023, extradited to the U.S.
Industries
Critical infrastructureAuthorities say the group included former Russian law enforcement, operated internationally, and caused hundreds of millions in estimated losses while targeting critical infrastructure and government entities.GovernmentAuthorities say the group included former Russian law enforcement, operated internationally, and caused hundreds of millions in estimated losses while targeting critical infrastructure and government entities.HealthcareZolotarjovs urged co-conspirators to leak or sell children’s health records stolen from a pediatric healthcare company and ultimately sent a collection of sensitive data to “hundreds of patients,” according to