FSB officer imprisoned for protecting Russian cybercriminals

A Russian FSB counterintelligence officer was sentenced to nine years in prison for accepting $1.7 million in bribes to shield cybercriminals from prosecution, revealing Russia's protection-racket dynamics with criminal hackers.

In February 2022, Russian MVD investigators arrested six hackers in Perm operating major credit card theft shops (Trump's Dumps, Sky-Fraud, Ferum Shop) selling stolen US cardholder data. The arrest exposed that FSB officer Grigory Tsaregorodtsev had been accepting bribes from these criminals since 2016 in exchange for protection from prosecution. In April 2024, a Russian court sentenced Tsaregorodtsev to nine years imprisonment, a 320 million ruble fine, property confiscation, and an eight-year post-release ban from government service.

This case illuminates Russia's opaque cybercriminal ecosystem and the "social contract" between the Kremlin and hackers: focus on foreign targets, avoid undermining Kremlin objectives, and remain responsive to government requests. Rather than signaling a crackdown on cybercrime, Tsaregorodtsev's prosecution reflects that he failed to deliver promised protection when the hackers were arrested—the hackers subsequently exposed him to authorities. The case demonstrates that Russian state security officers engaging with cybercriminal groups receive no guaranteed protection if caught, with outcomes depending on connections, operational significance, and interagency dynamics.

Defenders should note that Russian cybercriminals continue generating an estimated 74% of global ransomware revenue and serve as a talent pool for state-sponsored operations. The FSB and other Russian security services maintain ongoing relationships with criminal groups for both deniable operations and targeted attacks, particularly against foreign government and US Democratic Party infrastructure.

Source reporting: https://www.atlanticcouncil.org/content-series/offensive-cyber-actors-behavior-and-risk/take-the-bribe-but-watch-your-back-why-russia-imprisoned-a-security-officer-for-taking-cybercriminal-payoffs