US Sanctions Ryuk Ransomware’s Russian Money Launderer
Woman is accused of assisting Russian oligarchs and ransomware affiliates with schemes to evade sanctions.
![Russian flag in front of a bunch of code and globe-shaped sphere Russian flag in front of a bunch of code and globe-shaped sphere](https://eu-images.contentstack.com/v3/assets/blt6d90778a997de1cd/bltbd1d0bc83e84b149/64f179185bee981cbbc9bc81/russia_cybercrime_Klaus_Ohlenschlaeger_Alamy.jpg?width=1280&auto=webp&quality=95&format=jpg&disable=upscale)
The US Department of the Treasury's Office of Foreign Assets Control (OFAC) sanctioned Ekaterina Zhdanova on Nov. 3 for moving and laundering virtual currency in the interest of Russian elites legally barred from accessing western financial markets.
The OFAC slammed Russia with economic sanctions after its illegal invasion of Ukraine in February 2022. In March of the same year, Zhdanova, a Russian national, is accused of aiding a Russian elite in the transfer of $2.3 million into Western Europe through a fraudulent investment account, as well as real estate purchases.
According to the US Department of Treasury, Zhdanova also helped individuals connected to Russian Ryuk ransomware group launder over $2.3 million for one of the operation's affiliates. Ryuk ransomware has amassed thousands of victims, some located in the US. In October 2022, the US identified the group as a growing threat to hospitals and healthcare providers in the country.
In another instance, a sanctioned Russian oligarch sought Zhdanova's services to move more than $100 million out of Russia and into the United Arab Emirates, a service she regularly engaged in on behalf of wealthy, sanctioned Russians.
"Through this service, Zhdanova provided clients with United Arab Emirates tax residency, a United Arab Emirates identification card, and a bank account," the OFAC alleges.
Zhdanova used virtual currency entities that do not have anti-money laundering/combating the financing of terrorism (AML/CFT) controls, such as cryptocurrency exchange Garantex Europe OU, which has been known to disregard AML/CFT requirements, the OFAC added. She is also accused of using a variety of methods to move funds, including a network of international money laundering associates, cash transactions, and operating under traditional businesses, such as a luxury watch company.
The G7 is committed to closing these types of loopholes and sanction evasions that allow Russian elites to go unscathed by international retribution for their country's actions, the OFAC explained in its announcement of the move to sanction Zhdanova personally.
"We remain focused on safeguarding the US and international financial system against those who seek to exploit this technology, among other illicit finance risks in the virtual assets ecosystem," stated Brian E. Nelson, undersecretary of the Treasury for terrorism and financial intelligence.
About the Author
You May Also Like
Catch the Threat Before it Catches you: Proactive Ransomware Defense
September 5, 2024How to Evaluate Hybrid-Cloud Network Policies and Enhance Security
September 18, 2024DORA and PCI DSS 4.0: Scale Your Mainframe Security Strategy Among Evolving Regulations
September 26, 2024Harnessing the Power of Automation to Boost Enterprise Cybersecurity
October 3, 2024
[Virtual Event] The Essential Guide to Cloud Management
October 17, 2024Black Hat Europe - December 9-12 - Learn More
December 10, 2024SecTor - Canada's IT Security Conference Oct 22-24 - Learn More
October 22, 2024