Cyber Security News

Russian Nationals Charged for Money Laundering Services Fueling Criminal Ecosystem

The U.S. Department of Justice has announced charges against two Russian nationals for allegedly operating extensive money laundering services that supported a global network of cybercriminals.

This coordinated effort involved multiple U.S. government agencies and international partners, highlighting the ongoing battle against cybercrime and its financial underpinnings.

The US Department of State also revealed the Information on their X Platform.

Unveiling the Cybercrime Network

The indictment, unsealed in the Eastern District of Virginia, charges Sergey Ivanov, known online as “Taleon,” with conspiracy to commit bank fraud and money laundering.

Free Webinar on How to Protect Small Businesses Against Advanced Cyberthreats -> Free Registration

Ivanov has been accused of facilitating illegal transactions for cybercriminals for nearly two decades.

His services allegedly catered to various cybercrime marketplaces, including those involved in ransomware and darknet drug trafficking. 

Ivanov operated several Russian payment and exchange services—UAPS, PinPays, and PM2BTC—that directly provided money transfer and laundering services to criminals.

A detailed cryptocurrency blockchain analysis revealed that these services conducted approximately $1.15 billion transactions.

Notably, 32% of this amount originated from addresses associated with criminal activity, including fraud proceeds and ransomware payments. 

Timur Shakhmametov, another Russian national known online as “JokerStash” or “Vega,” faces similar charges for operating Joker’s Stash, a notorious carding website.

Joker’s Stash allegedly sold data from millions of stolen payment cards, generating profits estimated between $280 million and $1 billion.

International Collaboration and Seizures

This operation underscores the importance of international collaboration in combating cybercrime.

The U.S. Secret Service executed a seizure order against domains used by Cryptex.net, a cryptocurrency money laundering exchange offering anonymity to its users.

Cryptex facilitated transactions worth approximately $1.4 billion, with a significant portion linked to criminal activities. 

In a coordinated effort with Dutch authorities, servers hosting PM2BTC and Cryptex were seized and taken offline.

The Netherlands Police and other European agencies played crucial roles in these actions, confiscating over $7 million in cryptocurrency from these servers. 

The U.S. Department of State has also issued reward offers up to $11 million for information leading to the arrest or conviction of Ivanov, Shakhmametov, and others involved in these operations.

Analyse AnySuspicious Links Using ANY.RUN's New Safe Browsing Tool: Try It for Free



Dhivya

Divya is a Senior Journalist at Cyber Security news covering Cyber Attacks, Threats, Breaches, Vulnerabilities and other happenings in the cyber world.

Recent Posts

Critical ASUSTOR Vulnerability Let Attackers Execute Malicious Code with Elevated Privileges

A critical security vulnerability has been discovered in ASUSTOR backup and synchronization software, allowing attackers…

20 minutes ago

Windows 11 to Hide BSOD Crash Errors on Public Displays

Microsoft has introduced a practical new feature in Windows 11 designed specifically for public-facing monitors…

1 hour ago

SonicOS SSLVPN Vulnerability Let Attackers Crash the Firewall Remotely

SonicWall has disclosed a critical stack-based buffer overflow vulnerability in its SonicOS SSLVPN service. That…

4 hours ago

OpenAI Releases GPT-5.1-Codex-Max that Performs Coding Tasks Independently

OpenAI has launched GPT-5.1-Codex-Max, a specialized coding model designed to handle complex development tasks autonomously. The…

4 hours ago

Authorities Sanctioned Russia-based Bulletproof Hosting Provider for Supporting Ransomware Operations

The U.S. Department of the Treasury, Australia, and the United Kingdom have announced coordinated sanctions…

4 hours ago

Salesforce Confirms that Customers’ Data Was Accessed Following the Gainsight Breach

Salesforce has issued a critical security alert identifying "unusual activity" involving Gainsight-published applications connected to…

6 hours ago