A Russian woman the US accuses of being a career money launderer is the latest to be sanctioned by the country for her alleged role in moving hundreds of millions of dollars on behalf of oligarchs and ransomware criminals. Among these was her alleged involvement in moving funds for criminals involved in the Ryuk ransomware operation, known for attacks on US public sector organizations, with a particular focus on healthcare. Zhandova is accused of laundering more than $2.3 million in 2021, suspected to be related to victim ransom payments, for a Ryuk affiliate. Seven members of the Wizard Spider group, believed to be behind Ryuk, as well as Conti and Trickbot, were sanctioned earlier this year and another 11 were added to the SDN in September. It says these include the use of cryptocurrency exchanges that lack anti-money laundering controls like the Russian Garantex platform, which is also sanctioned by the US, as well as a large network of other international money launderers, cash, and traditional businesses. In addition to ransomware criminals, she has been commissioned by the wealthiest members of Russia's elite to move funds internationally, says the department. Another case saw Zhandover help a Russian client hide their source of wealth after moving $2.3 million into Western Europe, it alleges. The purpose of her services in this case, and with the oligarch, was to establish a source of funds for these individuals in regions where they are legally unable to access financial markets due to international sanctions, it alleges. "Through key facilitators like Zhdanova, Russian elites, ransomware groups, and other illicit actors sought to evade US and international sanctions, particularly through the abuse of virtual currency," said Brian E Nelson, under secretary of the US treasury for terrorism and financial intelligence. "This action is also consistent with the G7's commitment to cracking down on sanctions evasion and closing loopholes that allow the Russian Federation, its elites, proxies, and oligarchs to leverage virtual currency to offset the impact of international sanctions." The US and other allied nations have imposed sweeping sanctions on Russian individuals and entities, especially since the country's invasion of Ukraine in February 2022, in a bid to damage its economy and ability to finance the war. It lists extensively the impact of its sanctions on Russia, including cutting off the supply of microchips which is slowing the rate of technological innovation, as well as various issues with manufacturing in a number of different industries. The US's position is that the sanctions are working and Russia's economy is struggling. Often cited is Russia's last budget which indicated a GDP contraction of 2 percent, but the sanctions haven't had the desired impact yet. Russia responded to the early sanctions, which saw the rouble's value plummet around 30 percent within a few days of the invasion, by raising its key interest rate to 20 percent and imposing controls on withdrawing cash and capital movement. The markets in Russia then stabilized and have withstood much of the impact of the sanctions thus far, but the US believes ongoing pressures are compounding and will see a more robust weakening of the Russian economy over the next few years. OFAC's official fact sheet on Russian sanctions didn't mention the country's reported success with importing high-end goods. Throughout the year, numerous reports have indicated Russia is still able to defeat sanctions and procure the best tech on the market, including Cisco networking gear, Intel CPUs, and Nvidia GPUs. As for ransomware, the underground industry has remained resilient to attempts to disrupt it and sanctions have done little to deter victims from paying. Despite it being illegal to meet ransom demands to sanctioned groups, a significant proportion of ransomware victims still pay up in 2023, according to Astra Security, which states that 41 percent of all victims ignore the advice of Western countries on this matter.
This Cyber News was published on www.theregister.com. Publication date: Thu, 30 Nov 2023 23:19:27 +0000