Back to news
Millions of dollars in cryptocurrency has been confiscated as the DoJ cracks down on an infamous ransomware operator
@Source: techradar.com
Skip to main content
Tech Radar Pro
Tech Radar Gaming
Tech Radar Pro
TechRadar the business technology experts
Search TechRadar
View Profile
België (Nederlands)
Deutschland
North America
US (English)
Australasia
New Zealand
Expert Insights
Website builders
Web hosting
Best web hosting
Best office chairs
Best website builder
Best antivirus
Expert Insights
Recommended reading
US government seizes $1 million from major Russian ransomware gang in a rare win for the good guys
US government says BlackSuit and Royal ransomware gangs hit hundreds of major firms before shutdown
Major crackdown freezes over $300 million in cryptocurrency stolen from scams
Microsoft takes legal action against Lumma Stealer after 400,000 devices infected
Top ransomware group BlackSuit has dark web extortion sites seized and shut down
Ransomware gang attacking NAS devices taken down in major police operation
FBI, Secret Service operation takes down AVCheck site used to test malware
Millions of dollars in cryptocurrency has been confiscated as the DoJ cracks down on an infamous ransomware operator
Ellen Jennings-Trace
18 August 2025
Over $2.8 million seized from alleged Zeppelin owner
When you purchase through links on our site, we may earn an affiliate commission. Here’s how it works.
Millions of dollars worth of cryptocurrency has been seized by the DoJ
The wallet belongs to a suspected ransomware operator
The ransomware, Zeppelin, is functionally extinct
The US Department of Justice (DoJ) has announced a cryptocurrency wallet containing over $2.8 million has been seized following charges of conspiring to commit computer fraud and abuse, computer fraud and abuse, and conspiracy to commit money laundering brought against the wallet's owner.
Ianis Aleksandrovich Antropenko is thought to have headed up the now defunct Zeppelin ransomware operation, which collapsed in 2022, to ‘ target and attack a wide range of individuals, businesses, and organizations worldwide, including in the United States,’ the statement confirmed.
Zeppelin was a ransomware-as-a-service tool which uses phishing as a point of contact, using double extortion methods to steal and encrypt data to then sell (or threaten to sell) on the dark web.
You may like
US government seizes $1 million from major Russian ransomware gang in a rare win for the good guys
US government says BlackSuit and Royal ransomware gangs hit hundreds of major firms before shutdown
Major crackdown freezes over $300 million in cryptocurrency stolen from scams
Luxury assets
Alongside the cryptocurrency, the DoJ also seized $70,000 in cash as well as a luxury vehicle, assets which are alleged to be involved in ransomware activity - mostly having been used to launder proceeds gained through ransom payments.
‘Those assets were laundered in various ways, including by using the cryptocurrency mixing service ChipMixer, which was taken down in a coordinated international operation in 2023. Antropenko also laundered cryptocurrency by exchanging cryptocurrency for cash and depositing the cash in structured cash deposits.’
Zeppelin has been used to victimize organisations in manufacturing, IT, healthcare, and finance industries - particularly those that rely on sensitive data.
The RaaS was introduced in 2019, and tactics evolved over the next few years, with actors using the tool to distribute malware. However, after sloppy updated versions were released in 2021, the tool became significantly less prominent.
Are you a pro? Subscribe to our newsletter
Sign up to the TechRadar Pro newsletter to get all the top news, opinion, features and guidance your business needs to succeed!
Contact me with news and offers from other Future brandsReceive email from us on behalf of our trusted partners or sponsorsBy submitting your information you agree to the Terms & Conditions and Privacy Policy and are aged 16 or over.
By 2022, the service was essentially abandoned. Security researchers Unit221b developed a decryptor key after the tool was used to attack nonprofits, homeless shelters, and charity organisations.
You might also like
Take a look at our picks for the best firewall software around
Check out our choice for best endpoint protection software to keep you safe
US government wants to ban Chinese technology in submarine cables
Ellen Jennings-Trace
Staff Writer
Ellen has been writing for almost four years, with a focus on post-COVID policy whilst studying for BA Politics and International Relations at the University of Cardiff, followed by an MA in Political Communication. Before joining TechRadar Pro as a Junior Writer, she worked for Future Publishing’s MVC content team, working with merchants and retailers to upload content.
You must confirm your public display name before commenting
Please logout and then login again, you will then be prompted to enter your display name.
US government seizes $1 million from major Russian ransomware gang in a rare win for the good guys
US government says BlackSuit and Royal ransomware gangs hit hundreds of major firms before shutdown
Major crackdown freezes over $300 million in cryptocurrency stolen from scams
Microsoft takes legal action against Lumma Stealer after 400,000 devices infected
Top ransomware group BlackSuit has dark web extortion sites seized and shut down
Ransomware gang attacking NAS devices taken down in major police operation
Latest in Security
Are they brave or stupid? Malware targeting Russian crypto hackers found
Hackers breach HR firm Workday - is it the latest Salesforce CRM attack victim?
Plex warns users to update systems immediately after detecting worrying security issue - here's what we know
Cisco warns of worrying major security flaw in firewall command center, so patch now
A shocking amount of companies are knowingly shipping insecure code - and it might be hard to recover
Malicious URLs and phishing scams remain a constant threat for businesses - here's what can be done
Latest in News
Netflix confirms November release for Guillermo del Toro's Frankenstein –here's how I plan on watching it sooner
Fallout season 2 gets cryptic first-look images ahead of possible release date and trailer reveals at Gamescom 2025
Nvidia and Capcom are bringing DLSS to Resident Evil – here's why it's about time
NordVPN is killing Meshnet – here's all we know
Bug in Windows 11 update reportedly breaks some SSDs - here's what you need to know
Are they brave or stupid? Malware targeting Russian crypto hackers found
LATEST ARTICLES
Millions of dollars in cryptocurrency has been confiscated as the DoJ cracks down on an infamous ransomware operator
Everything new on Hulu in September 2025 – stream 79 new movies and 68 new TV shows, including Only Murders in the Building season 5 and more
China’s tiniest SSD can sit on your index finger, yet holds terabytes and performs faster than almost every MicroSD or SD card available
Nvidia and Capcom are bringing DLSS to Resident Evil – here's why it's about time
Nvidia's GeForce Now and RTX 4000 series GPUs are about to get better, and it's thanks to these crucial updates
TechRadar is part of Future US Inc, an international media group and leading digital publisher. Visit our corporate site.
Contact Future's experts
Terms and conditions
Privacy policy
Cookies policy
Advertise with us
Web notifications
Accessibility Statement
Future US, Inc. Full 7th Floor, 130 West 42nd Street,
Please login or signup to comment
Please wait...
Related News
18 Apr, 2025
Chalky championship runs — a new trend o . . .
17 Apr, 2025
Neeraj Chopra Begins Javelin Season With . . .
29 Jul, 2025
USA Swim Team Hit By Acute Gastroenterit . . .
13 Feb, 2025
Deepika Padukone Slays, Janhvi Kapoor Sh . . .
24 Apr, 2025
Pete Hegseth Hits Out at Makeup Claims
20 Jul, 2025
Suni Lee addresses OG Anunoby dating rum . . .
21 Feb, 2025
USAID Row 'Deeply Troubling' But No 'Pre . . .
15 Mar, 2025
Man, 18, is killed in road crash that le . . .