Russia Pivots, Cracks Down on Low-Level Hackers

According to Dark Reading, Russia is recalibrating its approach to cybercrime, cracking down on low-level hackers while preserving assets valuable to the state. The piece notes that Western law enforcement and improving cybersecurity across sectors have prompted Moscow to revoke some safe harbours and tighten enforcement on criminals operating within Russia.

It cites Operation Endgame, launched by American and European authorities in May 2024, as a catalyst that raised the diplomatic and enforcement cost of Russia’s previous stance. In October 2024, Russian authorities raided and arrested nearly 100 people involved with Cryptex and the Universal Automated Payment Service, seizing vehicles, property and 16 million Russian rubles.

An April 2025 case saw authorities arrest executives of Aeza Group, a bulletproof hosting provider linked to multiple threat actors and illicit marketplaces, alongside charges against hackers connected to the Mamont banking Trojan. The report observes that while some high‑level actors from Conti and Trickbot have faced penalties, others have been spared, suggesting a selective enforcement approach aimed at managing reputational pressure and protecting politically connected actors.