Russian Court Sentences Cybercrime Kingpin ‘Flint’ and 25 Associates
A Russian military court has sentenced 26 members of the cybercrime group Flint24 to prison terms of up to 15 years, including the network’s alleged leader, Alexei Stroganov. Stroganov, known by the alias “Flint,” is a notorious hacker also wanted by U.S. authorities for large-scale payment card fraud.
Background and Context
According to the court’s press service, the defendants were convicted of forming an organized criminal group and illegally trafficking payment card data. The group operated a sophisticated carding operation between 2014 and March 2020, acquiring and selling stolen data used to withdraw funds from bank accounts across the globe.
Investigators stated that the network operated roughly 90 online stores to distribute stolen payment card information belonging to victims in Russia, other post-Soviet countries, the European Union, and the United States. The illicit marketplace trafficked in “dumps”—data used to encode magnetic stripes—and included CVV and CVC codes enabling fraudulent online payments.
Key Figures and Entities
Stroganov received one of the longest sentences handed down by the court. Another key figure, reserve warrant officer I. N. Voroshilov—previously attached to a unit of Russia’s Southern Military District—was also imprisoned. The presence of a military officer among the defendants is why the case was heard by a military court.
This is not Stroganov’s first conviction. In 2006, a Moscow court sentenced him to six years for participating in a carding group led by Ukrainian national Artur Lyashenko. After serving that sentence, Stroganov reportedly worked as a cybersecurity consultant, according to the Russian newspaper Kommersant. He pleaded not guilty in the latest proceedings.
Legal and Financial Mechanisms
The investigation, led by Russia’s Federal Security Service (FSB), involved undercover purchases of stolen card details to trace the network. Law enforcement detained most suspects in March 2020 during raids at 60 locations across 11 Russian regions, seizing approximately $432,000 in cash.
The court imposed fines of up to $57,000 on the convicted members. The legal proceedings highlighted the group's technical infrastructure, which facilitated the automated sale of compromised financial data to criminals worldwide.
International Implications and Policy Response
While Stroganov now faces prison time in Russia, he remains a target for international law enforcement. In early 2024, U.S. prosecutors charged him with wire fraud, bank fraud, and aggravated identity theft. American investigators allege that from 2007 to 2017, Stroganov participated in a conspiracy that harvested data linked to hundreds of millions of payment cards, causing over $35 million in losses to financial institutions.
However, extradition remains a significant hurdle. Russia rarely extradites its citizens to the U.S., complicating efforts to hold him accountable for the alleged crimes committed against American victims. This case underscores the ongoing challenges in cross-border cybercrime enforcement.
The sentencing is part of a broader crackdown. In a separate action last week, Russian authorities detained a suspected administrator of LeakBase, a major online marketplace for stolen data, following an international operation targeting the site's infrastructure.
Sources
This report draws on information from the Russian military court press service, reporting by Kommersant, and public statements by the U.S. Secret Service.
