TLDR
- The DOJ seized $2.8 million in cryptocurrency and assets from ransomware operator Ianis Antropenko.
-
Antropenko allegedly used Zeppelin ransomware to target global victims and laundered funds via ChipMixer.
-
Federal authorities seized a luxury vehicle and cash as part of the crackdown on ransomware operations.
-
The DOJ continues to track ransomware operators, having recovered over $350 million for victims since 2020.
The U.S. Justice Department unsealed several warrants on Thursday, targeting the assets of a suspected ransomware operator. These warrants will allow the authorities to seize over $2.8 million in cryptocurrency, $70,000 in cash, and a luxury vehicle. The assets were linked to Ianis Aleksandrovich Antropenko, who is accused of deploying ransomware to steal data from victims around the world and demanding ransom payments for its return.
Antropenko allegedly used the Zeppelin ransomware to encrypt victims’ data and demanded cryptocurrency payments to decrypt it. According to prosecutors, he targeted people, businesses, and organizations globally. The ransomware scheme reportedly involved over 138 victims in the United States alone.
Ransomware Operator and Cryptocurrency Laundering
Prosecutors allege that after Antropenko extorted ransom payments from victims, he laundered the stolen funds through various methods, including a cryptocurrency mixing service called ChipMixer.
ChipMixer was taken down in 2023, and its operator was charged with money laundering. Through these illicit means, Antropenko sought to conceal the origins of the funds.
Investigators were able to track ransom payments to cryptocurrency wallets controlled by Antropenko. This allowed the authorities to follow the trail of the stolen funds. They also traced the movement of these assets to accounts on cryptocurrency exchanges and used this information to identify and seize assets linked to the criminal operation.
Seized Assets and Investigative Efforts
As part of the crackdown, the DOJ seized cryptocurrency, including Ethereum (ETH), USD Tether (USDT), and USD Coin (USDC), from a wallet controlled by Antropenko.
The authorities also confiscated high-end vehicles purchased with the stolen funds, including a $150,000 BMW X6M and a Lexus LX 570. Additionally, Binance exchange accounts linked to Antropenko were also targeted in the seizure.
“This case shows our ongoing commitment to tracking down ransomware operators and recovering stolen funds,” said DOJ officials in a statement. Federal authorities, including the FBI’s Dallas and Norfolk Field Offices, led the investigation. The case was supported by prosecutors from multiple jurisdictions and the DOJ’s Computer Crime and Intellectual Property Section.
Ongoing Investigation and Global Crackdown
The investigation into Antropenko’s ransomware activities is still ongoing. The DOJ’s efforts have been part of a broader initiative to combat cybercrime and ransomware operations worldwide. Since 2020, the DOJ has helped convict over 180 cybercriminals and recover more than $350 million for victims of ransomware attacks.
Authorities have also prevented over $200 million in ransom payments through the takedown of various ransomware groups.
The DOJ has made it clear that it will continue its efforts to disrupt these operations and recover assets stolen through ransomware schemes. The unsealing of the warrants in this case marks a continued commitment to targeting cybercriminals who exploit victims for financial gain.
