FBI takes down alleged money laundering service for ransomware groups

The FBI and international partners in Germany and Finland took down the online infrastructure of a cryptocurrency exchange that allegedly laundered funds for transnational cybercriminal groups, the Justice Department said Wednesday. 

According to a DOJ announcement, the exchange E-Note was used to process funds stolen by criminals in cyberattacks on healthcare entities and critical infrastructure, among other targets. Its payment service and money mule network processed more than $70 million connected to ransomware attacks since 2017, they alleged. 

The DOJ also unsealed an indictment in the Eastern District of Michigan against Mykhalio Petrovich Chudnovets, a 39-year-old Russian national who allegedly operated E-Note and faces a money laundering charge that carries up to 20 years in prison. Chudnovets has laundered money for cybercriminals since 2010, court documents allege.  

Law enforcement seized servers, mobile applications, and three websites — “e-note.com,” “e-note.ws,” and “jabb.mn” — linked to the operation. Police also seized Chudnovets’ customer databases and transaction records, the DOJ said. 

The Michigan State Police, German Federal Criminal Police Office and the Finnish National Bureau of Investigation also participated in the investigation. 

Get more insights with the

Recorded Future

Intelligence Cloud.

Learn more.

No previous article

No new articles

James Reddick

James Reddick

has worked as a journalist around the world, including in Lebanon and in Cambodia, where he was Deputy Managing Editor of The Phnom Penh Post. He is also a radio and podcast producer for outlets like Snap Judgment.

 

Total
0
Shares
Previous Post

FTC orders crypto platform Nomad to distribute $37.5 million after 2022 theft

Next Post

Millions impacted by PornHub, SoundCloud data breaches

Related Posts

Chinese TA415 Uses VS Code Remote Tunnels to Spy on U.S. Economic Policy Experts

A China-aligned threat actor known as TA415 has been attributed to spear-phishing campaigns targeting the U.S. government, think tanks, and academic organizations utilizing U.S.-China economic-themed lures. "In this activity, the group masqueraded as the current Chair of the Select Committee on Strategic Competition between the United States and the Chinese Communist Party (CCP), as well as the
Read More

GlassWorm Returns with 24 Malicious Extensions Impersonating Popular Developer Tools

The supply chain campaign known as GlassWorm has once again reared its head, infiltrating both Microsoft Visual Studio Marketplace and Open VSX with 24 extensions impersonating popular developer tools and frameworks like Flutter, React, Tailwind, Vim, and Vue. GlassWorm was first documented in October 2025, detailing its use of the Solana blockchain for command-and-control (C2) and harvest npm,
Read More