What’s actually slowing this PC down?
Pick the symptom - the matching free tool is one click away.
On November 3, 2023, the U.S. Treasury Department announced that its Office of Foreign Assets Control (OFAC) had sanctioned Russian national Ekaterina Zhdanova. Treasury said she helped launder more than $2.3 million in suspected victim payments for a Ryuk ransomware affiliate in 2021, while also facilitating other cross-border transfers. This was an OFAC sanctions designation, not a criminal conviction.
What Treasury said Zhdanova did
Treasury designated Zhdanova under Executive Order 14024, saying she operated or had operated in Russia’s financial services sector. The agency described her as a facilitator who helped Russian elites and cybercriminals move money internationally using virtual currency and other channels. Its account gives separate examples that should not be mistaken for one combined transaction.
As an Amazon Associate I earn from qualifying purchases.
Suspected Ryuk ransomware proceeds
Treasury said Zhdanova provided services to people connected with the Russian Ryuk ransomware group. It said that in 2021 she laundered more than $2.3 million in suspected victim payments on behalf of a Ryuk affiliate. The word “suspected” matters: the release presents Treasury’s stated basis for a sanctions action, not a court finding that the payments were criminal proceeds or that Zhdanova was convicted.
The Tool Desk
Outbyte PC Repair FREEClear out junk files and repair common Windows errorsFree Scan →Outbyte Driver Updater FREEFix the driver behind crashes, sound loss and screen glitchesFind Drivers →Other transfers cited in the designation
Treasury separately said that in March 2022, Zhdanova helped a Russian client obscure the source of wealth behind a transfer of more than $2.3 million into Western Europe. The agency said the client used a fraudulently opened investment account and real-estate purchases as part of the arrangement.
#1 Best Overall
In another example, Treasury said a Russian oligarch sought Zhdanova’s help to move more than $100 million to the United Arab Emirates. The release describes a request for assistance; it does not say that this sum was the Ryuk-related money or that the transfer was completed.
All three figures and transaction descriptions above are Treasury’s account in its November 3, 2023 announcement. They are not independently verified transaction findings in the materials cited here. Read Treasury’s designation announcement.
How the alleged money movement worked
Treasury’s description points to a network of intermediaries and payment routes rather than a single cryptocurrency transaction. It cited cross-border virtual-currency transfers, cash, associates and organizations, entities it said lacked anti-money-laundering and countering-the-financing-of-terrorism controls, and traditional businesses, including a luxury watch company.
Free tools Windows power users keep installed
One-click scans. No signup required.
That mix helps explain why a laundering investigation may follow the movement and conversion of funds across several services and jurisdictions. Digital assets can be one part of the route; accounts, businesses, cash and property may also feature in the movement or concealment of funds. Treasury’s description of those methods is specific to the conduct it attributed to Zhdanova and the people she allegedly assisted.
Rank #3
What an OFAC designation means
OFAC’s action blocks property and interests in property belonging to a designated person when they are in the United States or in the possession or control of U.S. persons. Such property must be reported to OFAC. U.S. persons, and people conducting transactions within or transiting the United States, generally may not deal in blocked property unless an exemption or OFAC authorization applies.
The blocking rules also extend to an entity owned, directly or indirectly and individually or in the aggregate, at least 50 percent by one or more blocked persons. This is known as OFAC’s 50 Percent Rule. The Treasury release describes the scope and effects of the designation; it does not establish Zhdanova’s present-day status on the live sanctions list.
Independent reader supportYour contribution helps us test, update, and keep practical guides available for everyone.A sanctions action is not a criminal conviction
An OFAC designation is an administrative sanctions measure. Treasury’s announcement states the government’s basis for blocking property and restricting transactions; it is not a criminal judgment or proof of a court conviction. The release does not report that a court convicted Zhdanova.
That distinction matters when describing allegations: Treasury said she laundered suspected Ryuk victim payments, but the cited announcement alone should not be presented as a criminal verdict. The designation’s financial restrictions have their own effect regardless of whether a criminal prosecution or conviction is reported.
Best Value
Why financial intermediaries matter in ransomware cases
Treasury’s 2026 National Money Laundering Risk Assessment says ransomware criminals often use digital assets and related service providers to conceal and transfer proceeds. That broader assessment helps explain the role of payment intermediaries in ransomware finance, but it is not additional evidence about Zhdanova or the transactions in the 2023 designation. See Treasury’s 2026 National Money Laundering Risk Assessment.
Treasury has also announced other, separate actions involving services or networks connected to ransomware activity. Those actions concern different parties and legal authorities; they should not be treated as evidence of a connection to Zhdanova’s case.
Quick Recap
Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.
