Ransomware · 132 days ago
Karakurt did not just steal data. It used negotiators to turn stalled extortion cases into payments, and that role now carries prison time in the US. The standard response misses that the pressure campaign itself is part of the attack surface, not just the intrusion.
Deniss Zolotarjovs, a Latvian member of Karakurt, pleaded guilty and received 8.5 years in prison after admitting involvement in extortion, ransom negotiations, and money laundering. Court records say he helped analyze stolen data, pushed victims to pay, and received 10% of negotiated ransom payments in cryptocurrency before converting them to Russian rubles. The group was tied to at least 53 entities and more than $56 million in losses, with victims spanning healthcare, government, and critical infrastructure.
For defenders, the signal is that ransomware crews rely on specialized operators who extend the life of an incident long after the initial intrusion. That makes stolen data, negotiation leverage, and leak threats part of the threat model even when the intrusion itself is contained.
5 sources covering this story
The Record from Recorded Future
Conti, Akira ransomware affiliate given 8-year sentence
Deniss Zolotarjovs pleaded guilty in July 2025 to money laundering and wire fraud charges after being arrested in the country of Georgia.
Latvian national sentenced for ransomware attacks run by former Conti leaders
Deniss Zolotarjovs was mostly tasked with putting pressure on the Russia-based crew’s victims, in one case leaking hundreds of children’s health records.
Conti ransomware gang member sentenced to 102 months in prison - Help Net Security
A Latvian member of a Russian-linked ransomware group tied to Conti was sentenced to 102 months for attacks on more than 54 companies.
Karakurt Ransomware Negotiator Sentenced to Prison
Deniss Zolotarjovs was directly involved in extortion strategies and in negotiations with victim companies.
Karakurt extortion gang ‘cold case’ negotiator gets 8.5 years in prison
A Latvian national extradited to the United States was sentenced to 8.5 years in prison for his "cold case" negotiator role in the Russian Karakurt ransomware group.
Part of the PlainSec briefing for 2026-05-05