
Russia, War & Organized Crime
03/04/24 • 46 min
Russian organized crime has a mythology attached to it - the brutal tattooed men of the Vory v Zakone. But those days are long in the past, rapid globalisation saw a new type of organized criminal take the reins in the Russian underworld, spreading their influence as criminal facilitators across the world.
But the war in Ukraine has changed that. It's changed the relationship between organized crime and the Russian state, the status quo within the established criminal order, the potential vacuum left by those criminals who fight and die in the conflict, the establishment of Russian criminal groups outside of the country, the flows of illicit goods themselves have evolved, and then Ukraine, once so critical to those illicit flows, is currently lost.
Such is the uncertainty surrounding organized crime that there have been rumblings about a possible return to a dark period in Russian history, known as the 'Wild 90s' - a period of anarchy that is etched into the Russian psyche.
Speaker(s):
Mark Galeotti, the Executive Director of Mayak Intelligence, honorary professor at University College London, member of the GI Network. Author of ‘The Vory: Russia’s Super Mafia' and the GI-TOC paper: Time of Troubles: The Russian underworld since the Ukraine invasion
Links:
(GI Paper) Rebellion as racket: Crime and the Donbas conflict 2014-2022
(GI Paper) Evolving drug trends in wartime Ukraine
(GI Paper) Crossroads: Kazakhstan's changing illicit drug economy
(GI Paper) Port in a storm: Organized crime in Odesa since the Russian invasion
(Podcast) “Death Can Wait”: Drugs on the Frontline in Ukraine
Research Links:
https://tass.ru/obschestvo/9218777
Russian organized crime has a mythology attached to it - the brutal tattooed men of the Vory v Zakone. But those days are long in the past, rapid globalisation saw a new type of organized criminal take the reins in the Russian underworld, spreading their influence as criminal facilitators across the world.
But the war in Ukraine has changed that. It's changed the relationship between organized crime and the Russian state, the status quo within the established criminal order, the potential vacuum left by those criminals who fight and die in the conflict, the establishment of Russian criminal groups outside of the country, the flows of illicit goods themselves have evolved, and then Ukraine, once so critical to those illicit flows, is currently lost.
Such is the uncertainty surrounding organized crime that there have been rumblings about a possible return to a dark period in Russian history, known as the 'Wild 90s' - a period of anarchy that is etched into the Russian psyche.
Speaker(s):
Mark Galeotti, the Executive Director of Mayak Intelligence, honorary professor at University College London, member of the GI Network. Author of ‘The Vory: Russia’s Super Mafia' and the GI-TOC paper: Time of Troubles: The Russian underworld since the Ukraine invasion
Links:
(GI Paper) Rebellion as racket: Crime and the Donbas conflict 2014-2022
(GI Paper) Evolving drug trends in wartime Ukraine
(GI Paper) Crossroads: Kazakhstan's changing illicit drug economy
(GI Paper) Port in a storm: Organized crime in Odesa since the Russian invasion
(Podcast) “Death Can Wait”: Drugs on the Frontline in Ukraine
Research Links:
https://tass.ru/obschestvo/9218777
Previous Episode

Monitoring: What is going on in Ecuador?
At the start of the year masked gunman burst into a television studio in Guayaquil, Ecuador. The cameras were live and the entire event was broadcast. The video shows gang members shouting at staff, pushing them to the ground, threatening them with guns and explosives. These pictures subsequently travelled around the world.
But this event was just one in a series to hit Ecuador in a short space of time. Car bombs, kidnappings, murder, prison riots, prominent prisoner escapes, and another national state of emergency.
Criminal violence has washed over the country as competing gangs like Los Choneros and Los Lobos battle in prisons and on the streets over control of the lucrative cocaine trafficking business. Foreign organized criminal actors like the Mexican Sinaloa and Jalisco New Generation Cartels, the Albanian Mafia, FARC dissident groups from Colombia, and others, are all active in Ecuador, a country described as a "cocaine superhighway".
In the space of just five or so years, Ecuador has gone from one of the safest countries in Latin America to a country with one of the highest murder rates. In this episode we are going to talk about how this happened.
Speaker(s):
Felipe Botero Escobar, the Head of Andean Programmes at the Global Initiative against Transnational Organized Crime
GI-TOC:
(Paper) Organized crime declares war: The road to chaos in Ecuador
(Blog) Fernando Villavicencio - Assassination Witness Project
The Global Organized Crime Index - Ecuador Country Profile
(Paper) Transnational Tentacles: Global Hotspots of Balkan Organized Crime
(Podcast episode) The Index - Ecuador
(Paper) The cocaine pipeline to Europe
Additional Reading:
https://www.abc.net.au/news/2024-01-12/gang-violence-ecuador-cocaine-banana-exports-los-choneros/103311442
https://www.eluniverso.com/noticias/seguridad/el-fiscal-cesar-suarez-asesinado-en-los-ceibos-investigaba-el-ataque-armado-en-tc-television-nota/
https://www.bbc.co.uk/news/world-latin-america-68014040
https://news.sky.com/story/prosecutor-investigating-ecuador-tv-station-attack-shot-dead-13050642
https://ecuador221.com.ec/ofrecen-recompensa-por-informacion-de-cinco-cabecillas-de-bandas-criminales/
https://www.eluniverso.com/noticias/seguridad/colon-pico-captura-riobamba-enero-2024-nota/
https://www.bbc.com/news/world-latin-america-67912235
https://english.elpais.com/international/2024-01-09/daniel-noboa-declares-an-internal-armed-conflict-in-ecuador-after-an-armed-commando-breaks-into-a-television-station-live-on-air.html
https://crisis24.garda.com/alerts/2024/01/ecuador-criminal-groups-launch-attacks-jan-9-following-declaration-of-state-of-emergency-and-curfew-update-3
https://www.nytimes.com/2024/01/09/world/americas/ecuador-gang-prison-emergency.html
https://www.dailymail.co.uk/news/article-12943831/Chaos-Ecuador-cops-abducted-prison-riots-cities-rocked-explosions-feared-Los-Choneros-gang-boss-Fito-escaped-jail-sparking-state-emergency.html
https://www.bbc.com/news/world-latin-america-67921986
https://time.com/6552988/ecuador-most-wanted-criminal-fito-escape-guayaquil-prison/
https://english.elpais.com/international/2024-01-09/state-of-emergency-declared-in-ecuador-as-security-crisis-worsens.html
https://www.eluniverso.com/noticias/seguridad/quien-es-alias-fito-el-cabecilla-que-el-gobierno-no-hallo-en-la-carcel-regional-durante-operativo-nota/
https://www.washingtonpost.com/world/2024/01/09/ecuadoran-president-declares-armed-conflict-gunmen-storm-tv-studio/
https://www.aljazeera.com/news/2023/6/2/ecuadors-embattled-president-lasso-will-not-seek-re-election
https://www.infobae.com/america/america-latina/2023/03/31/ecuador-asesinaron-a-ruben-cherrez-amigo-del-cunado-de-guillermo-lasso-y-vinculado-a-la-mafia-albanesa/
https://www.telesurenglish.net/news/Ecuadors-President-Calls-for-Investigation-of-Brother-in-law-20230314-0021.html
https://usacrime.com/leandro-el-patron-norero-beheaded-ecuador-prison/
https://www.france24.com/en/americas/20221005-new-clashes-break-out-in-ecuador-prison-after-deadly-riot
https://www.bbc.co.uk/news/world-latin-ame...
Next Episode

LockBit: Is this the end?
LockBit, the world's largest ransomware-as-a-service (RaaS) provider suffered a very public takedown by an international law enforcement task force, Operation Cronos.
The ransomware behemoth quickly relaunched just days later. But in a world where trust is key, might the reputational damage be too great?
This is the story of the rise of LockBit, its relationship with other infamous cybercriminal groups, its uneasy relationship with some affiliates, its curious leader LockBitsupp, the public takedown and the relaunch, and what this means for the future of ransomware-as-a-service.
Speaker(s):
Koryak Uzan, Co-founder & Managing Director of PRODAFT
Links:
GITOC - The Rise and Fall of the Conti ransomware group
PRODAFT - LockBit: Behind the Lines of the Notorious RaaS
PRODAFT - The Demise of LOCKBIT: Disrupting the Most Prominent Ransomware Gang by Utilizing Upstream Threat Intelligence
https://twitter.com/PRODAFT
https://www.trendmicro.com/vinfo/gb/security/news/ransomware-by-the-numbers/lockbit-blackcat-and-clop-prevail-as-top-raas-groups-for-1h-2023
https://www.wired.com/story/lockbit-ransomware-takedown-website-nca-fbi/
https://krebsonsecurity.com/2024/02/fulton-county-security-experts-call-lockbits-bluff/
https://www.blackfog.com/the-top-10-ransomware-groups-of-2023/
https://go.recordedfuture.com/webinar/threat-briefing/lockbit-takedown
https://www.bloomberg.com/news/articles/2024-02-19/fbi-uk-crime-agency-say-they-have-disrupted-lockbit-hacking-gang?cmpid=cyber
https://www.bleepingcomputer.com/news/security/lockbit-ransomware-returns-to-attacks-with-new-encryptors-servers/
https://www.nationalcrimeagency.gov.uk/news/nca-leads-international-investigation-targeting-worlds-most-harmful-ransomware-group
https://samples.vx-underground.org/tmp/Lockbit_Statement_2024-02-24.txt
https://therecord.media/lockbit-lied-about-deleting-exfiltrated-data-after-ransom-payments
https://www.sophos.com/en-us/content/state-of-ransomware
https://www.trendmicro.com/vinfo/gb/security/news/ransomware-spotlight/ransomware-spotlight-rhysida
https://www.theguardian.com/commentisfree/2024/feb/06/hacker-british-library-cybersecurity-cybercrime-uk
https://www.cisa.gov/news-events/cybersecurity-advisories/aa23-352a
https://www.trendmicro.com/vinfo/us/security/news/ransomware-spotlight/ransomware-spotlight-royal
https://www.reuters.com/technology/cybersecurity/blackcat-ransomware-site-claims-it-was-seized-uk-law-enforcement-denies-being-2024-03-05/
https://thehackernews.com/2024/03/exit-scam-blackcat-ransomware-group.html
https://twitter.com/ddd1ms/status/1764979901965201552
https://www.cpomagazine.com/cyber-security/under-increasing-federal-scrutiny-blackcat-ransomware-gang-pulls-exit-scam-on-its-way-out/
https://www.trustwave.com/en-us/resources/blogs/spiderlabs-blog/resurgence-of-blackcat-ransomware/
https://www.cpomagazine.com/cyber-security/blackcat-ransomware-gang-recovers-from-early-december-law-enforcement-operation-restores-websites-seized-by-doj/
https://www.darkreading.com/threat-intelligence/lockbit-leak-site-reemerges-week-after-complete-compromise-
https://www.linkedin.com/posts/prodaft_manual-ransomware-business-activity-7026870344648916992-mgZX/?originalSubdomain=nl
https://therecord.media/lockbit-ransomware-indictments-us-doj-bassterlord
https://home.treasury.gov/news/press-releases/jy2114
https://therecord.media/lockbit-affiliates-arrested-in-ukraine-poland
https://www.reuters.com/technology/cybersecurity/ukraine-arrests-father-son-duo-lockbit-cybercrime-bust-2024-02-21/
https://www.chainalysis.com/blog/lockbit-takedown-sanctions-february-2024/
https://www.europol.europa.eu/media-press/newsroom/news/law-enforcement-disrupt-worlds-biggest-ransomware-operation
https://analyst1.com/this-forum-is-a-bunch-of-communists-and-they-set-me-up-lockbit-spills-the-tea-regarding-their-recent-ban-on-russian-speaking-forums/
https://securityaffairs.com/149941/hacking/lockbit-3-leaked-code-usage.html
https://www.bankinfosecurity.com/ransomware-as-a-service-gang-lockbit-pays-first-50k-bounty-a-20099
https://therecord.media/wazawaka-cyber-most-wanted-interview-click-here
https://www.state.gov/the-department-of-state-announces-reward-offer-against-russian-ransomware-actor/
https://www.fbi.gov/wanted/cyber/mi...
If you like this episode you’ll love
Episode Comments
Generate a badge
Get a badge for your website that links back to this episode
<a href="https://goodpods.com/podcasts/deep-dive-exploring-organized-crime-44495/russia-war-and-organized-crime-46065331"> <img src="https://storage.googleapis.com/goodpods-images-bucket/badges/generic-badge-1.svg" alt="listen to russia, war & organized crime on goodpods" style="width: 225px" /> </a>
Copy