Artur Sungatov

Artur Sungatov, a Russian national, has been identified as a significant threat actor affiliated with the LockBit ransomware group. Alongside Ivan Kondratyev (also known as Bassterlord), Sungatov is believed to have actively engaged in LockBit ransomware attacks. These cyberattacks targeted various industries, including manufacturing and logistics across the United States and other parts of the world. The U.S. Office of Foreign Assets Control (OFAC) noted ten cryptocurrency addresses associated with Sungatov and Kondratyev, highlighting their use of digital currencies in their illicit activities. In February 2024, the U.S. Justice Department unsealed an indictment obtained in the District of New Jersey against Sungatov and Kondratyev. The indictment charged them with deploying LockBit ransomware against numerous victims throughout the United States, including businesses nationwide in the manufacturing sector and other industries. This action was part of the wider Operation Cronos, which aimed to disrupt the activities of the LockBit ransomware variant. The seizure of LockBit's data leak site and infrastructure coincided with the announcement of these indictments. The US government had previously charged other members of the LockBit group, including Sungatov and Kondratyev. The charges against Sungatov and Kondratyev mark a significant step forward in efforts to combat the global threat posed by ransomware attacks and highlight the ongoing commitment to holding cybercriminals accountable for their actions.