#karakurt — Public Fediverse posts

Cybercrime headlines today include the sentencing of a Latvian national involved with Karakurt and other ransomware gangs, who was sentenced to 102 months in prison. Reading the court filings on the case, the FBI's affidavit rang a bell at one point.

In October 2023, I was contacted by someone claiming to be a cybersecurity researcher who had found one of Karakurt and Akira's storage servers. They told me that they were contacting the gangs' victims and trying to get paid for finding the data and research. It didn't sound "whitehat" to me, and when "anonymoux" said he tried to get a reward from Rewards for Justice but had gotten no reply and wanted to get in touch with the FBI, I agreed to help them make contact with the FBI. While many TAs avoid law enforcement, DataBreaches has known several who want to be in touch with the FBI. While some want to try to make deals because they think they are about to be arrested, others just think they will outsmart the FBI. "Anonymoux" seemed to be in that latter group.

I later wrote about my interactions with "anonymoux" in January 2024: https://databreaches.net/2024/01/10/follow-on-extortion-campaign-confirmation-of-some-findings-by-arctic-wolf/

Now that court filings for Deniss Zolotarjovs (Денисс Золотарёвс), aka "Sforza_cesarini," have been unsealed, you can read the FBI agent's affidavit in support of the complaint and arrest, in which he describes how he and Zolotarjovs chatted, and how he eventually concluded that "anonymoux" was Zolotarjovs:

https://storage.courtlistener.com/recap/gov.uscourts.ohsd.295291/gov.uscourts.ohsd.295291.6.0.pdf

#databreach #ransomware #karakurt #akira #tommyleaks #schoolboys #blockbit #

Cybercrime headlines today include the sentencing of a Latvian national involved with Karakurt and other ransomware gangs, who was sentenced to 102 months in prison. Reading the court filings on the case, the FBI's affidavit rang a bell at one point.

In October 2023, I was contacted by someone claiming to be a cybersecurity researcher who had found one of Karakurt and Akira's storage servers. They told me that they were contacting the gangs' victims and trying to get paid for finding the data and research. It didn't sound "whitehat" to me, and when "anonymoux" said he tried to get a reward from Rewards for Justice but had gotten no reply and wanted to get in touch with the FBI, I agreed to help them make contact with the FBI. While many TAs avoid law enforcement, DataBreaches has known several who want to be in touch with the FBI. While some want to try to make deals because they think they are about to be arrested, others just think they will outsmart the FBI. "Anonymoux" seemed to be in that latter group.

I later wrote about my interactions with "anonymoux" in January 2024: https://databreaches.net/2024/01/10/follow-on-extortion-campaign-confirmation-of-some-findings-by-arctic-wolf/

Now that court filings for Deniss Zolotarjovs (Денисс Золотарёвс), aka "Sforza_cesarini," have been unsealed, you can read the FBI agent's affidavit in support of the complaint and arrest, in which he describes how he and Zolotarjovs chatted, and how he eventually concluded that "anonymoux" was Zolotarjovs:

https://storage.courtlistener.com/recap/gov.uscourts.ohsd.295291/gov.uscourts.ohsd.295291.6.0.pdf

#databreach #ransomware #karakurt #akira #tommyleaks #schoolboys #blockbit #

From #Ukraine’s Frontlines to #IDEX2025: #Karakurt-R a #MicroDrone for Stealth #Recon #Operations
https://armyrecognition.com/news/army-news/2025/from-ukraines-frontlines-to-idex-2025-karakurt-r-a-micro-drone-for-stealth-recon-operations
@nytimes @WSJ @washingtonpost @USATODAY @latimes

#bot #miltodon
Original tweet: https://nitter.weiler.rocks/ArmyRecognition/status/1891549720545313040

Latvian Hacker Deniss Zolotarjovs Extradited to U.S. Over Karakurt Ties https://thecyberexpress.com/deniss-zolotarjovs-extradited-in-karakurt-case/ #TheCyberExpressNews #CybersecurityNews #DenissZolotarjovs #cybercrimegroup #TheCyberExpress #FirewallDaily #DarkWebNews #Karakurt

Latvian Hacker Deniss Zolotarjovs Extradited to U.S. Over Karakurt Ties https://thecyberexpress.com/deniss-zolotarjovs-extradited-in-karakurt-case/ #TheCyberExpressNews #CybersecurityNews #DenissZolotarjovs #cybercrimegroup #TheCyberExpress #FirewallDaily #DarkWebNews #Karakurt

Latvian national Deniss Zolotarjovs, alleged member of #Karakurt, made his first appearance in federal court in Ohio on Tuesday.

The affidavit by FBI Special Agent Connor Lentz discreetly mentioned DataBreaches' support in the case. It was one of those times when a TA tried to play me but it didn't quite work out well for them.

https://databreaches.net/2024/08/23/alleged-member-of-karakurt-extradited-and-charged-in-ohio/

#databreach #ransomware #arrest

@brett @amvinfe @BleepingComputer

Latvian national Deniss Zolotarjovs, alleged member of #Karakurt, made his first appearance in federal court in Ohio on Tuesday.

The affidavit by FBI Special Agent Connor Lentz discreetly mentioned DataBreaches' support in the case. It was one of those times when a TA tried to play me but it didn't quite work out well for them.

https://databreaches.net/2024/08/23/alleged-member-of-karakurt-extradited-and-charged-in-ohio/

#databreach #ransomware #arrest

@brett @amvinfe @BleepingComputer

#Karakurt #Deemkeyne
#TheVenusian

https://invidious.privacyredirect.com/watch?v=T13GdBydHk0&listen=false

And especially big support to #Karakurt who had to face an intensified torrent of hate online over the last few days just because she's a proud, kickass lesbian.

#Karakurt has listed Jefferson County Health Center.

At least 19 US health systems have been impacted by #ransomware this year. The systems operate 33 hospitals and at least 16/19 had data stolen. Stats for 2022 in the link.

#JCHC

@PogoWasRight

https://www.emsisoft.com/en/blog/43258/the-state-of-ransomware-in-the-us-report-and-statistics-2022/

#Karakurt has listed Jefferson County Health Center.

At least 19 US health systems have been impacted by #ransomware this year. The systems operate 33 hospitals and at least 16/19 had data stolen. Stats for 2022 in the link.

#JCHC

@PogoWasRight

https://www.emsisoft.com/en/blog/43258/the-state-of-ransomware-in-the-us-report-and-statistics-2022/

#Karakurt has listed Reeds Spring School District. #ransomware #rssdiscovery

@PogoWasRight @douglevin

#Karakurt has listed Reeds Spring School District. #ransomware #rssdiscovery

@PogoWasRight @douglevin

#Karakurt has listed Eastside Union School District. #ransomware #EUSD

@PogoWasRight @douglevin

#Karakurt has listed Eastside Union School District. #ransomware #EUSD

@PogoWasRight @douglevin

#Karakurt has listed York County School of Technology. #YCST

@PogoWasRight

#Karakurt has listed York County School of Technology. #YCST

@PogoWasRight

Karakurt revendique des attaques informations à l'encontre de:

• 🇺🇸 Medicalodges, Inc (medicalodges.com)

• 🇺🇸 Petaluma Health Center, Inc (phealthcenter.org)

• 🇺🇸 Pharm-Pacc Corporation (pharm-pacc.com)

• 🇺🇸 Ozarks Community Hospital (ochonline.com)

#usa #healthcare #ransomware #pediatrics #medicine #assistance #karakurt #rehabilitation #care #dosages #medical #solutions #santé #cardiopulmonary #hospital #diagnostic #payments #management #therapies #imaging #market #wellness #billing #surgery #providers #outpatient #pharma #patients #doctors #hospitals #databreach #business #services #nursing #mental #medications #recovery #informatique

#Karakurt has listed Ozarks Community Hospital. #OCH

@PogoWasRight

#Karakurt has listed Ozarks Community Hospital. #OCH

@PogoWasRight

#Karakurt has listed the National Board of Osteopathic Medical Examiners #NBOME

#Karakurt has listed the National Board of Osteopathic Medical Examiners #NBOME

🔎 IcedID’s VNC Backdoors: Dark Cat, Anubis & Keyhole

A summary of #VNC #backdoor capabilities reconstructed from network traffic.

👀 Screenshots, videos and clipboard data at https://blog.nviso.eu/2023/03/20/icedids-vnc-backdoors-dark-cat-anubis-keyhole/

#Malware #PCAP #Reversing #DarkCat #Anubis #Keyhole #DarkVNC #IcedID #Karakurt #BlackBasta

#HackAlert Goodwill Industries was breached, 384GB is being released on the #Darkweb #Hacking #Karakurt

Horwitz & Horwitz law firm also #breached back in October, 300GB being released now #nSafe

#HackAlert Goodwill Industries was breached, 384GB is being released on the #Darkweb #Hacking #Karakurt

Horwitz & Horwitz law firm also #breached back in October, 300GB being released now #nSafe

🇺🇸 Les opérateurs Karakurt revendiquent une attaque informatique à l'encontre de Schrader Pacific Advanced Valves (schrader-pacific.com) #usa #france #valves #automotive #ransomware #international #industries #tanks #fuel #systems #equipment #pumps #seals #cooling #industrial #tires #karakurt #certificates #plastic #supply #engineers #events #mobile #compliant #innovative #machines #vehicles #military #devices #market #safety #aviation #fluid #distributors #design #transport #thermal #plugs #catalogs #management #brochures #informatique #passengers #databreach #corporate #couplers #pressure #connectors #employees #informatique

#Karakurt waxes poetic about their encounter with an “apple of discord.” Tip: if you need to deal with extortionists, call in an “apple of discord.” And call in LE too. They can help, which is precisely why cybercriminals try to convince victims to go it alone.

#Karakurt waxes poetic about their encounter with an “apple of discord.” Tip: if you need to deal with extortionists, call in an “apple of discord.” And call in LE too. They can help, which is precisely why cybercriminals try to convince victims to go it alone.

🇺🇸 Les opérateurs Karakurt revendiquent une attaque informatique à l'encontre de San Benito Consolidated Independent School District (sbcisd.net) #usa #ransomware #education #threats #karakurt #digital #board #citizens #religious #cyber #employees #parents #departments #students #staff #databreach #scholar #learning #careers #services #classroom #informatique

🇹🇷 Les opérateurs Karakurt revendiquent des attaques informatiques à l'encontre de Özel Gözakademi Hastanesi (gozakademi.com.tr) & Medilife Sağlık Grubu (medilife.com.tr) #turkey #medical #ransomware #karakurt #estetik #citizens #medikal #cyber #surgeries #health #hospital #patients #medicine #databreach #clinical #threats #births #examinations #healthcare #nurses #services #doctors #careers #turquie #informatique

🇺🇸 Les opérateurs Karakurt revendiquent une attaque informatique à l'encontre de Davenport Community School District (davenport.k12.ia.us) #usa #karakurt #ransomware #education #scholar #services #schools #databreach #learning #outage #campus #threats #cyber #software #students #systems #community #networks #family #planning #digital #academics #careers #board #online #panne #informatique

🇸🇳 Les opérateurs Karakurt annoncent l'échec de la négociation avec l'Autorité de Régulation des Télécommunications et des Postes (artp.sn) et diffusent plusieurs fichiers de données Outlook d'un poids de ± 33 GB #senegal #government #telecom #mail #networks #email #products #karakurt #ransomware #services #outlook #databreach #outage #threats #cyber #postal #digital #safety #systems #software #panne #informatique

https://cybersecuritymag.africa/cybercriminels-groupe-karakurt-divulguent-donnees-cyberattaque-artp-senegal

🇨🇷 Le portail de la ville de Belén Municipalidad de Belén (belen.go.cr) placé hors-ligne suite à la revendication de l'attaque informatique de type rançongiciel avec exfiltration de données #costarica #karakurt #ransomware #city #cyber #outage #threats #web #databreach #services #panne #informatique

🇬🇷 Les opérateurs Karakurt annoncent l'échec de la négociation avec Calin Group S.A. (calin.gr) et la fuite imminente de 555 GB de données contenant, selon eux, des documents confidentiels #greece #corporate #ransomware #karakurt #textile #franchisees #fashion #industries #retails #clothing #products #franchisor #stores #design #lingerie #services #companies #numérique #businesses #luxe #infrastructure #networks #customers #online #international #brands #web #commercial #market #partnership #threats #databreach #financial #management #production #clothes #solutions #grece #informatique

🇺🇸 Les opérateurs Karakurt revendiquent une attaque informatique à l'encontre de William A. Kibbe & Associates, Inc (kibbe.com) #usa #associates #ransomware #karakurt #companies #solutions #engineers #management #independent #services #careers #mechanical #threats #risks #business #design #partnership #customers #packages #healthcare #electrical #agents #travel #hvac #civil #smart #compliant #architecture #city #cyber #corporate #business #employees #heavy #products #benefits #automotive #manufacturer #community #renovation #commercial #safety #industry #industrial #education #facilities #construction #architectural #buildings #informatique

🇺🇸 Les opérateurs Karakurt revendiquent une attaque informatique à l'encontre de Gannon Associates (gannonassociates.com) #usa #associates #ransomware #karakurt #offices #cyber #insurance #companies #employees #hvac #services #extensive #solutions #partnership #business #threats #health #care #corporate #accidents #careers #products #benefits #packages #farmers #safety #community #agents #customers #online #medicare #shopping #commercial #independent #risks #civil #mechanical #industry #manufacturer #compliant #healthcare #industrial #municipal #education #management #agency #business #travel #informatique

🇺🇸 Methodist McKinney Hospital (methodistmckinneyhospital.com) communique avant la diffusion par Karakurt de 359 GB de données exfiltrées #usa #hospital #databreach #cyber #medical #threats #nurses #patients #care #health #billing #medicine #systems #insurance #management #healthcare #networks #doctors #karakurt #community #products #pathology #orthopedic #equipment #safety #residents #surgery #services #informatique

https://methodistmckinneyhospital.com/wp-content/uploads/2022/08/Revised-Preliminary-Website-Notice_8.3.22.pdf