Russian cybercriminals suspected behind cryptocurrency thefts from LastPass users

Cybercriminals linked to Russia are suspected of being behind a series of cryptocurrency thefts targeting users of the LastPass platform, according to a detailed blockchain analysis published by analytics firm TRM Labs.

According to the report, Russian cybercriminal infrastructure has been repeatedly used to launder stolen crypto assets. TRM Labs states that all evidence collected is consistent with the involvement of Russian threat actors, including repeated interactions with infrastructure linked to Russia.

The analysis further shows that digital wallets interacting both before and after the money-laundering process displayed operational ties to Russia, CyberNews reports.

Analysts estimate that more than $28 million in cryptocurrency was stolen, converted into Bitcoin, and laundered through the Wasabi wallet in late 2024 and early 2025.

An additional $7 million was traced in September 2025. In both cases, the total amount of approximately $35 million is believed to represent only a portion of the overall losses.

The report reveals that the stolen funds were routed through CryptoMixer, a service that has since been shut down, and later withdrawn via the sanctioned Russian exchange Cryptex in 2024.

The aforementioned $7 million was first sent through Wasabi before being transferred to Audi6, another Russian digital wallet linked to criminal activity.

Authorities and cybersecurity firms continue their investigations to identify those responsible and to prevent similar incidents in the future./TheGeoPost.