Researcher traced payments for 122 cybercrime services to one Vancouver processor in 2024
In December 2024, KrebsOnSecurity reported analyst Richard Sanders's finding that all 122 cybercrime services he tested took payments through Cryptomus. The processor listed a Vancouver address, where a CTV and IJF count found at least 90 registrations.
Reality
- Evidence55
- Adoption
- Not scored
- Hype gap+10
- Incentives
- Not scored
- Confidence55
Aeza-linked networks now hold 21 times the IPv4 space of 2022, Qurium finds
Qurium says Aeza International and NetCrafters together originate 536 IPv4 prefixes, up from 25 at the end of 2022. It argues that operators should follow ASNs and prefixes, because the company names around them changed through two rounds of OFAC sanctions.
Publishers:qurium.org
Reality
- Evidence60
- Adoption
- Not scored
- Hype gap+10
- Incentives45
- Confidence58
Russia's central bank says its digital currency law bars transfers to non-custodial wallets and allows peer-to-peer crypto trades only until July 1, 2027. Licensed intermediaries, Sberbank among them, will handle everything after that.
Perspective Coverage
5 publishers
- Builder
- Builder 21%
- Operator
- Operator 42%
- Investor
- Investor 37%
Reality
- Evidence72
- Adoption20
- Hype gap+35
- Incentives60
- Confidence74
DOJ raided more than 40 Texas residences on September 21-25 and seized 187 laptops and other devices it says North Koreans used in an IT-worker scheme. The FBI says the workers now also hire freelancers in South Asia and West Africa, so US hosts are one intermediary among several.
Perspective Coverage
17 publishers
- Builder
- Builder 25%
- Operator
- Operator 55%
- Investor
- Investor 20%
Reality
- Evidence80
- Adoption
- Not scored
- Hype gap+25
- Incentives55
- Confidence78
A7A5 stablecoin transfers fell to 14 a day on Tron and 18 on Ethereum after Ukrainian drones struck Yandex data centers. Elliptic's Tom Robinson ties the two, though the issuer's own explanation so far is technical problems.
Reality
- Evidence58
- Adoption8
- Hype gap+15
- Incentives
- Not scored
- Confidence62
Leaked records show the Kremlin-backed A7 network listing UK fintech Wooshpay as a payment route to China and Hong Kong, capped at $50,000 a day. The published documents do not settle whether Wooshpay knew, so its partners have only the listing to assess.
Reality
- Evidence62
- Adoption8
- Hype gap+15
- Incentives
- Not scored
- Confidence60
Senate Democratic staff found 84% of 846 Iran-linked sanctioned wallets moved almost only in Tether's USDT. Most came from Israel's list, and any penalty rests with a Treasury and Justice Department that Senator Blumenthal says have enforced nothing.
Perspective Coverage
8 publishers
- Builder
- Builder 17%
- Operator
- Operator 41%
- Investor
- Investor 42%
Reality
- Evidence60
- Adoption75
- Hype gap+30
- Incentives72
- Confidence62
OFAC designated A7, a Russia-linked payments network that reportedly settled over $86 billion in its first year, a transnational criminal organization. FinCEN's same-day proposal to bar transfers through A7's sub-agents gives banks and crypto firms a new screening job aimed at intermediaries.
Perspective Coverage
6 publishers
- Builder
- Builder 17%
- Operator
- Operator 47%
- Investor
- Investor 36%
Reality
- Evidence70
- Adoption62
- Hype gap+15
- Incentives55
- Confidence70
Two named banks account for $2.9bn of the $6.9bn A7 moved through SWIFT-connected accounts
Leaked internal files from the Promsvyazbank-backed payments group describe roughly 100 front companies in four jurisdictions opening accounts at banks still on the network, with counterfeit invoices produced whenever compliance teams asked questions.
Reality
- Evidence40
- Adoption55
- Hype gap+12
- Incentives55
- Confidence40
Cutting A7A5's route into liquid stablecoins took its daily volume down 96%
Leaked files put $6.9 billion of the Kremlin-linked A7 network's money through correspondent banks, while TRM counts $166 billion of A7-linked crypto volume. After the sanctions, the daily turnover of its ruble token fell 96%.
Reality
- Evidence58
- Adoption61
- Hype gap+14
- Incentives72
- Confidence52
Sekoia and Kudelski split the Lazarus umbrella into six DPRK sub-clusters
The joint research argues that constant reorganization under the GRIB and NIA is a control mechanism rather than administrative noise, and that treating Lazarus as one actor hides the revenue mandate driving most of the intrusions.
Publishers:kudelskisecurity.com
Reality
- Evidence38
- Adoption
- Not scored
- Hype gap+18
- Incentives62
- Confidence48
Iran plans exclusion zone near Hormuz requiring permission to transit
American strikes on five Revolutionary Guard tankers and Tehran's plan to stop unpermitted vessels have turned a current-quarter fuel line into a routing and compliance question, with Brent's seven-week high of $97 the part most plans already price.
Reality
- Evidence50
- Adoption35
- Hype gap+20
- Incentives78
- Confidence50
China's $1 Trillion Illicit Economy Runs On Rails Your Supply Chain Already Uses
Foreign Affairs puts the annual take near $1 trillion and says two-thirds of counterfeit seizures worldwide trace to China or Hong Kong. That is a counterparty problem, not a compliance checkbox.
Reality
- Evidence44
- Adoption58
- Hype gap+24
- Incentives34
- Confidence46