U.S. seizes $2.8 million in crypto from Zeppelin ransomware operator

What’s new: The U.S. Department of Justice has seized over $2.8 million in cryptocurrency from Ianis Aleksandrovich Antropenko, a suspected operator of the now-defunct Zeppelin ransomware. Antropenko has been indicted for computer fraud and money laundering, with the ransomware operation targeting various individuals and organizations globally from 2019 to 2022. The seizure also included $70,000 in cash and a luxury vehicle. Antropenko allegedly laundered ransom payments through services like ChipMixer and other methods to evade detection.

Who’s affected

Organizations and individuals targeted by the Zeppelin ransomware, which exploited vulnerabilities in MSP software, particularly in the healthcare and IT sectors, are affected. The operation has been linked to significant financial losses due to ransom demands.

What to do

• Review security measures to protect against ransomware, especially vulnerabilities in MSP software.
• Implement robust data backup solutions to mitigate the impact of potential ransomware attacks.
• Stay informed about ransomware trends and law enforcement actions to enhance security posture.

Sources

• BleepingComputer