OFAC sanctions 10 wallets linked to LockBit takedown

Europol said authorities have frozen over 200 crypto accounts linked to LockBit

article-image

Artwork by Crystal Le

share

The Treasury’s Office of Foreign Assets Control added several wallet addresses tied to two Russian nationals to its specially designated nationals list. 

Artur Sungatov and Ivan Kondratyev were indicted on charges related to ransomware deployment. The two were tied to LockBit, a ransomware group that received over $120 million in ransom payments, according to the Department of Justice. 

OFAC identified 10 wallet addresses tied to Sungatov and Kondratyev.

The US worked with the UK and other law enforcement agencies across the world to charge and take action against LockBit. 

A press release from Europol said that law enforcement agencies from 10 countries worked together to freeze over “200 cryptocurrency accounts linked to the criminal organization, underscoring the commitment to disrupt the economic incentives driving ransomware attacks.”

Read more: Crypto money laundering activity down 29% from 2022: Chainalysis 

Sungatov and Kondratyev, the DOJ said, were designated due to their cyberattacks.

The Cybersecurity and Infrastructure Security Agency put out a cybersecurity advisory on LockBit in June, noting that the ransomware variant continued to be “prolific in 2023” after becoming the most deployed variant in 2022.

“LockBit ransomware operation functions as a Ransomware-as-a-Service (RaaS) model where affiliates are recruited to conduct ransomware attacks using LockBit ransomware tools and infrastructure,” the warning said.

The takedown, dubbed Operation Cronos, took 34 servers down across the Netherlands, US, Finland, France and the UK. 

The UK’s National Crime Agency, according to Europol, took control of the “technical infrastructure that allows all elements of the LockBit service to operate, as well as their leak site on the dark web, on which they previously hosted the data stolen from victims in ransomware attacks.”

Chainalysis, earlier this month, said that ransomware payments topped $1 billion in 2023 after the figure declined to $567 million in 2022.

Read more: North Korea is still a threat to crypto: Chainalysis

The $1 billion marked the “highest number ever observed,” the firm noted.


Start your day with top crypto insights from David Canellis and Katherine Ross. Subscribe to the Empire newsletter.

Explore the growing intersection between crypto, macroeconomics, policy and finance with Ben Strack, Casey Wagner and Felix Jauvin. Subscribe to the Forward Guidance newsletter.

Get alpha directly in your inbox with the 0xResearch newsletter — market highlights, charts, degen trade ideas, governance updates, and more.

The Lightspeed newsletter is all things Solana, in your inbox, every day. Subscribe to daily Solana news from Jack Kubinec and Jeff Albus.

Tags

Upcoming Events

Javits Center North | 445 11th Ave

Tues - Thurs, March 18 - 20, 2025

Blockworks’ Digital Asset Summit (DAS) will feature conversations between the builders, allocators, and legislators who will shape the trajectory of the digital asset ecosystem in the US and abroad.

recent research

Research

article-image

Turns out that owning the end-user via a crypto wallet is quite a prosperous business

article-image

The announcement followed growing speculation that Gensler would announce his exit before Trump takes office next year

article-image

HashKey Capital’s Jupiter Zheng highlighted three success areas he’s watching: Ethereum, Solana and certain tokens in DeFi

article-image

Jack explored the various AI and memecoin projects that have sprung up over the past month

article-image

If gold remains steady today, a single move from bitcoin to $98,500 would do it

article-image

Revenue estimates for the third quarter come in at $33 billion, which would be an 83% increase from the prior year