Latvian Hacker Sentenced for Ransomware Attacks Linked to Russian Government Databases
In a significant legal development, Latvian national Deniss Zolotarjovs has been sentenced to over eight years in a U.S. federal prison for his involvement in a series of ransomware attacks. Zolotarjovs was identified as a key operative within the Karakurt ransomware group, a faction with alleged ties to Russian intelligence agencies.
The Karakurt group, reportedly led by former members of the Akira and Conti ransomware gangs—both previously sanctioned by the U.S. Treasury for connections to Russian intelligence—has been implicated in numerous cyberattacks targeting U.S. government entities. These attacks have notably disrupted critical services, including 911 emergency dispatch systems, and have resulted in the theft of sensitive information, such as children’s health records.
Zolotarjovs played a pivotal role in intensifying pressure on victims who resisted the gang’s ransom demands, according to the Department of Justice (DOJ). His conviction underscores the intricate links between cybercriminal activities and state-sponsored operations.
U.S. prosecutors revealed that the Karakurt gang exploited access to Russian government databases and leveraged connections within Russian law enforcement to intimidate victims further. This revelation highlights the complex interplay between cybercriminal organizations and state apparatuses.
Security experts have long accused the Russian government of providing a safe haven for ransomware gangs and malicious hackers, often shielding them from Western law enforcement efforts. The refusal to extradite Russian citizens accused of cybercrimes has been a point of contention, with U.S. officials labeling Russia as a safe haven for cybercriminals.
The DOJ’s findings indicate that the Karakurt gang’s operations contributed to corruption within the Russian government. The gang’s leaders allegedly evaded state taxes and regularly bribed officials to avoid compulsory military service.
Despite requests for comment, the Russian Foreign Ministry has remained silent on these allegations.
The Karakurt gang is believed to have targeted over 54 companies, amassing at least $15 million in ransom payments. The current status of the gang remains uncertain, as many such operations frequently rebrand or change leadership to evade detection and sanctions.
Zolotarjovs was apprehended in Georgia in 2023 and extradited to the United States in August 2024, where he subsequently pleaded guilty to the charges.
