Overview
OSINT analysis of Denis Obrezko & the Void Blizzard threat group
ctrlaltintel.com
On 30 October 2025, Russian citizen
Denis Obrezko landed in Phuket, Thailand. Less than a week later, Thai authorities arrested him at the request of the FBI.
Obrezko has since been extradited and indicted in the United States, where he is accused of participating in the Russian state-aligned threat group
Void Blizzard, also known as
Laundry Bear.
Following his arrest, Moscow reportedly placed
Obrezko on an
international wanted list, issuing an arrest warrant. We assess this may have been intended to distance the Russian state from him by presenting
Obrezko as a rogue criminal rather than a state-linked operative.
Using identifiers disclosed in FBI affidavits and indictments, Ctrl-Alt-Intel identified evidence connecting
Obrezko to the
Information and Analytical Center of EMERCOM of Russia, a state institution within Russia’s
Ministry of Emergency Situations. Our findings indicate that this connection was active during at least 2021.
ALWAYS the nuggets that get you! It's funny they can obfuscate their identity and chain 100 VPNs/TOR and proxies but don't pay with cash?