Analysts at TRM Labs report that Russian-speaking ransomware groups generated over $500 million in crypto proceeds in 2023, making Russia a central hub for such activities. These groups, including Lockbit and BlackCat/ALPHV, accounted for nearly 70% of all ransomware-related crypto earnings.
Lockbit alone targeted major entities like Boeing and Royal Mail, while BlackCat/ALPHV attacked MGM Resorts and Henry Schein. A standout feature of the report is that over 80% of the world’s sanctioned crypto volume was tied to Russia-based exchange Garantex, which facilitated purchases for military equipment used by Russian forces in Ukraine.
This shift highlights Russia’s growing reliance on crypto to circumvent sanctions and maintain cross-border trade, despite crypto’s legal prohibition within the country. Recently, Russia’s parliament moved to regulate crypto mining and international trade, signaling a strategic pivot towards crypto to sustain economic activities amid sanctions.
