logo

U.S. seizes $2.8 million in crypto from Zeppelin ransomware operator

ID: 11bffd86-77d3-5546-a052-099bf9bde2f6

STIX ID: report--11bffd86-77d3-5546-a052-099bf9bde2f6

Feed Name: Bleeping Computer

Threat Score
70/100

Date Published: 2025-08-17

Date Updated: 2026-04-20

Author: Bill Toulas

...
...

The U.S. Department of Justice announced seizures totaling over $2.8M in cryptocurrency, cash, and a vehicle from Ianis Antropenko, the suspected operator of the Zeppelin ransomware. The report outlines Zeppelin's operations from 2019–2022—targeting healthcare and IT via MSP software flaws—its use of data exfiltration and ransom demands, money laundering through ChipMixer and cash exchanges, the group's decline and researcher-held decryptions, and the later sale of its source code.

Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.