Russian National Arrested for Laundering Crypto Payments from Lazarus Group

Argentine authorities have arrested a Russian national accused of laundering cryptocurrency payments linked to the notorious North Korean Lazarus Group.

The operation, led by the Argentine Federal Police (PFA) and the San Isidro Specialized Fiscal Unit in Cybercrime Investigations (UFEIC), resulted in the seizure of millions of dollars in assets.

Complex Web of Transactions Unraveled

The investigation, spearheaded by UFEIC lead prosecutors Alejandro Musso and Denis Banchero, uncovered a sophisticated network of illicit transactions.

Adrian Acosta of the PFA’s Technologic Cybercrime Department played a crucial role in tracing the flow of assets across multiple blockchains.

Are You From SOC/DFIR Teams? - Try Advanced Malware and Phishing Analysis With ANY.RUN -14-day free trial

The suspect reportedly operated a makeshift financial institution from his apartment in Argentina, facilitating the exchange of illicit cryptocurrency for clean crypto and fiat currency.

The subject’s activities extended beyond the Lazarus Group, as he allegedly accepted proceeds from child sexual abuse vendors and terrorist financiers.

Using blockchain intelligence tools provided by TRM Labs, investigators tracked suspicious transfers linked to these criminal activities.

Prosecutor Musso presented compelling evidence to Judge Yadarola, who approved the arrest and asset seizure.

The operation highlights the importance of collaboration between law enforcement and private sector experts in combating cybercrime.

TRM Labs, a private cryptocurrency mapping company, played a pivotal role in the investigation by providing tools that allowed authorities to map and analyze the complex web of transactions.

This partnership underscores the growing need for advanced technological solutions to tackle the illicit use of cryptocurrency.

During the arrest, the PFA seized over $120,000 worth of cryptocurrency and an additional $15,000,000 from the suspect’s properties.

This substantial asset seizure marks a critical step in disrupting cybercriminals’ financial networks and serves as a warning to those who exploit digital currencies for illegal purposes.

The case demonstrates Argentina’s commitment to addressing cybercrime and protecting the integrity of its financial systems.

Protect Your Business with Cynet Managed All-in-One Cybersecurity Platform – Try Free Trial

Divya

Divya is a Senior Journalist at GBhackers covering Cyber Attacks, Threats, Breaches, Vulnerabilities and other happenings in the cyber world.

Recent Posts

Hackers Use ConnectWise SkyKick Credentials to Access Microsoft 365, Halting Cloud Backups

Attackers abused compromised ConnectWise Cloud Backup credentials to access Microsoft 365 customer environments, prompting ConnectWise…

1 day ago

Anthropic’s Claude AI Uncovers Origins of NSA-Provided Cryptographic Keys After 25 Years

Anthropic says an internal Claude research model reconstructed how the National Security Agency generated seeds…

2 days ago

Critical WordPress Flaws Allow Attackers to Execute Remote Code Without Authentication

Two WordPress Core vulnerabilities can be chained to execute remote code without authentication, according to…

2 days ago

OpenBSD Kernel Flaw Dating Back 37 Years Enables Local Privilege Escalation to Root

A newly disclosed OpenBSD kernel exploitation chain combines a shared memory accounting flaw with a…

2 days ago

GhostAction Hackers Hide Credential-Stealing Malware in Fake Font Files Across 94 GitHub Repositories

GhostAction attackers have expanded their GitHub credential theft campaign with a second stage that disguises…

2 days ago

SideCopy Hackers Target Indian Organizations With ReverseRAT Malware to Steal Data

Indian authorities have warned that SideCopy hackers are targeting Indian organizations, including academic institutions, with…

2 days ago