A FIN7-attributed threat actor was sentenced on Thursday, April 7th, 2022, for his criminal activity within the FIN7 organization. Denys Iarmak, a Ukrainian national, was arrested in Bangkok, Thailand in November 2019 and subsequently extradited to the United States in May 2020. He pleaded guilty in November 2021 to one count of conspiracy to commit wire fraud and one count of conspiracy to commit computer hacking. He was sentenced to five (5) years in prison. Within FIN7, Iarmak served as a top-level “pen tester,” and was involved in an undisclosed amount of FIN7 operations. Criminal work carried out by Iarmak while involved with FIN7 included malware-laced phishing emails which would extract financial card information from its victim and several other financially driven operations. FIN7 has compromised assets throughout the United States, with one (1) operation alone exfiltrating roughly 20 million customer card records from 6,500 point-of-sale terminal across 3,600 businesses. Other well-known companies that have been compromised by the FIN7 threat organization include, but are not limited to, Chili’s, Arby’s, Chipotle, and Red Robin. Iarmak is the third member of FIN7 to be charged and sentenced in the United States. CTIX continues to monitor threat actors worldwide and will continue to provide additional updates accordingly.