A Latvian national extradited to the U.S. has been sentenced to 8.5 years in prison for negotiating ransoms as a "cold case" operator for the Russian Karakurt extortion gang.
The defendant served as a negotiator for Karakurt, facilitating extortion payments from victims whose data the gang threatened to expose. Karakurt, also known as the BlackCat variant operators, has targeted hundreds of organizations globally through data theft and encryption attacks.
The extradition and conviction represent a notable enforcement action against major ransomware infrastructure. U.S. authorities have prioritized dismantling extortion networks following waves of attacks on critical infrastructure and healthcare systems.
Karakurt emerged as a significant threat in 2021, distinguishing itself by stealing data before deploying ransomware, giving victims multiple pressure points. The gang's negotiators communicated directly with victims to demand payments in cryptocurrency.
The prosecution underscores ongoing international cooperation against cybercriminal networks. Latvia's cooperation in the extradition reflects broader efforts by European nations to address ransomware operations operating from or through their territories.
Authorities have arrested two alleged members of TeamPCP, a hacking group responsible for infecting over 1,000 organizations through supply-chain attacks.
A Georgia police officer used Flock surveillance technology to track the movements of his ex-partner and another officer after their affair ended, according to internal investigation records.
McKesson, a major healthcare and pharmaceutical distributor, confirmed a cybersecurity incident involving unauthorized access to third-party applications. Extortion group ShinyHunters claims responsibility for stealing 284 million patient data records.
Fraudsters are exploiting Microsoft Teams and similar enterprise chat apps to deceive Chinese users into sending large sums of money. The trend has sparked a wave of complaints across the region.