Cybersecurity10 July 2025 2m bleepingcomputer.com

Russian Basketball Player Arrested for Alleged Ransomware Role

Daniil Kasatkin, a Russian professional basketball player, has been arrested in France as part of a U.S. investigation into ransomware attacks. He is accused of acting as a negotiator for a ransomware gang.
Russian Basketball Player Arrested for Alleged Ransomware Role

Key Takeaways

  • 1.Bélot further emphasized Kasatkin’s lack of computer skills, asserting, "He's useless with computers and can't even install an application.
  • 2.Conti, which became known as a successor to the earlier Ryuk gang, was active until its shutdown in 2022 after a significant data breach.
  • 3.## Impact and Legacy ## Impact and Legacy ## Impact and Legacy While it was not previously confirmed that Conti had breached federal agencies, the U.S.

Daniil Kasatkin, a professional basketball player from Russia, was apprehended on June 21, 2025, at the Charles de Gaulle Airport in Paris. His arrest comes at the behest of the United States, which issued an international warrant for his involvement in ransomware negotiations.

Kasatkin, who previously played NCAA basketball at Penn State before returning to Russia in 2019, has been accused of serving as a negotiator for a ransomware group alleged to have targeted over 900 companies, including federal agencies, between 2020 and 2022.

French media reports indicated that Kasatkin was traveling with his fiancée when he was taken into custody. He faces serious charges, including "conspiracy to commit computer fraud" and "computer fraud conspiracy."

"conspiracy to commit computer fraud"

Person using laptop with holographic cybersecurity shield and digital interface elements
Person using laptop with holographic cybersecurity shield and digital interface elements

In defense of Kasatkin, his lawyer, Frédéric Bélot, claimed that his client is innocent and that the accusations stem from a second-hand computer he had purchased. "He bought a second-hand computer. He did absolutely nothing. He's stunned," Bélot stated.

Bélot further emphasized Kasatkin’s lack of computer skills, asserting, "He's useless with computers and can't even install an application. He didn't touch anything on the computer: it was either hacked, or the hacker sold it to him to act under the cover of another person."

Data center server room with multiple monitors displaying code and red LED lighting
Data center server room with multiple monitors displaying code and red LED lighting

The identity of the ransomware gang involved in the case has not been disclosed, but the scale of its operations aligns with descriptions used by the U.S. Department of Justice to refer to the notorious Conti ransomware group. Conti, which became known as a successor to the earlier Ryuk gang, was active until its shutdown in 2022 after a significant data breach.

Impact and Legacy

Impact and Legacy

Impact and Legacy

While it was not previously confirmed that Conti had breached federal agencies, the U.S. has linked the group to a number of attacks on state governments. This revelation adds another layer to the scrutiny surrounding ransomware activities and their impact on both private and public sector institutions.

In a related context, French law enforcement last month arrested four suspected operators of the BreachForums hacking forum. Notable aliases in this operation included IntelBroker and ShinyHunters, who are known for their involvement in cyber crimes.

Looking Ahead

Looking Ahead

The case surrounding Kasatkin highlights the increasingly blurred lines between sports and cybercrime, revealing how individuals from various professions may become entangled in illegal activities. As investigations continue, the implications for the future of cybersecurity and legal accountability in such cases remain to be seen.