DOJ Seizes $2.8M in Crypto From Alleged Global Ransomware Operator

In Summary

  • DOJ seizes $2.8M in crypto from alleged ransomware operator
  • Warrants also target $70K cash and a luxury vehicle
  • Suspect accused of extorting victims globally with stolen data
  • Funds laundered partly through shuttered service ChipMixer


WASHINGTON, Monday, August 18, 2025-The US Justice Department unsealed warrants Thursday to seize $2.8 million in cryptocurrency, cash and property tied to an alleged ransomware operator accused of extorting victims worldwide.

Federal prosecutors said the warrants, unsealed in courts in Virginia, California and Texas, authorize the seizure of crypto assets, $70,000 in cash and a luxury vehicle linked to Ianis Aleksandrovich Antropenko.

Authorities allege Antropenko deployed ransomware against individuals, businesses and organizations, then demanded payments to restore or withhold stolen data.

Prosecutors said the scheme involved threatening to publish, delete or encrypt data unless ransoms were paid.

The operation allegedly laundered proceeds through multiple channels, including the crypto mixing service ChipMixer, which was dismantled in 2023 when its operator was charged with money laundering.

The seizures highlight continued federal efforts to combat ransomware and disrupt the financial infrastructure behind cybercrime. The Justice Department has intensified its use of asset forfeiture and targeted warrants to track and seize illicit crypto holdings, part of a broader strategy to deter attacks on U.S. and global networks.

Ransomware remains a top national security concern after a series of attacks in recent years crippled hospitals, pipelines and local governments. By targeting financial flows, officials aim to weaken the ability of ransomware groups to profit from extortion.

The department did not disclose whether additional arrests are planned but emphasized that the investigation is ongoing.

Protected by Copyscape