The EU has sanctioned ransomware core member Stern, whose associated wallet received more than $300 million in ransom.

robot
Abstract generation in progress
According to Chainalysis, EU sanctions Russian national Vitaly Nikolayevich Kovalev (alias Stern), calling him a senior member of the Trickbot criminal group and saying he was involved in the operation of ransomware such as Ryuk and Conti. Chainalysis said that wallets associated with Stern have cumulatively received more than $300 million in ransom and have transacted funds with multiple ransomware networks, including Diavol, Karakurt, Royal, and Quantum. The EU also sanctions developers of the info-stealing malware LummaC2, the anti-law-enforcement hosting service provider Media Land LLC, personnel linked to Russia’s military intelligence agency GRU Unit 29155, as well as the pro-Russian hacker groups CARR and Z-Pentest.
View Original
This page may contain third-party content, which is provided for information purposes only (not representations/warranties) and should not be considered as an endorsement of its views by Gate, nor as financial or professional advice. See Disclaimer for details.
  • Reward
  • 3
  • 2
  • Share
Comment
Add a comment
Add a comment
FragmentGlowFlower
· 7h ago
The pseudonymous Stern’s real name—Vitaly Kovalev—was exposed by Chainalysis, and it turns out that staying anonymous on-chain is just a joke.
View OriginalReply0
GateUser-15b19a42
· 7h ago
LummaC2 developers were also taken down, and it feels like selling malicious software toolchains is more dangerous than writing ransomware.
View OriginalReply0
ReflectionsOnTheStreetCorner
· 7h ago
On-chain tracking has truly become an effective law enforcement tool—$300 million in transaction flow was fully exposed and traced
View OriginalReply0
  • Pinned