Russian Cybercriminal Sentenced to Over Three Years for Selling Stolen Data

A 27-year-old Russian citizen has been sentenced to over three years in a U.S. prison for trafficking stolen financial data, login details, and other personal information on the now-defunct dark web marketplace, Slilpp.

Georgy Kavzharadze from Moscow pleaded guilty in February to a conspiracy charge involving bank and wire fraud. In addition to his 40-month prison sentence, he has been ordered to pay restitution totaling $1,233,521.47.

Operating under various aliases such as TeRorPP, Torqovec, and PlutuSS, Kavzharadze is believed to have listed over 626,100 stolen login credentials on Slilpp and sold more than 297,300 of them between July 2016 and May 2021.

According to the U.S. Department of Justice, these credentials were connected to $1.2 million in fraudulent transactions. By May 27, 2021, Kavzharadze’s Slilpp account advertised 240,495 login credentials, which could be exploited to access victims’ online financial accounts.

Estimates suggest Kavzharadze earned at least $200,000 from his illicit activities. He faced multiple charges, including conspiracy to commit bank fraud, wire fraud, and aggravated identity theft, and was extradited to the U.S. for prosecution.

Slilpp, which was one of the largest dark web marketplaces for stolen login credentials, was shut down in June 2021 during a coordinated international law enforcement effort involving the U.S., Germany, the Netherlands, and Romania. The site had been operational since 2012 and was known for trading over 80 million credentials from more than 1,400 companies.