INTEL_REPORT
Chainalysis Blog · published 4/17/2026, 9:14:02 PM · TLP amber
Summary
Ingested excerpt (first ~500 chars of normalized text).
Sanctioned Russia-Linked Exchange Grinex Suspends Operations Following Alleged Cyberattack TL;DR Grinex, the sanctioned successor to the Russian exchange Garantex, suspended operations yesterday following a claimed 1 billion ruble ($13.7… The post Sanctioned Russia-Linked Exchange Grinex Suspends Operations Following Alleged Cyberattack appeared first on Chainalysis . Sanctioned Russia-Linked Exchange Grinex Suspends Operations Chainalysis Products Crypto Investigatio…
https://www.chainalysis.com/blog/sanctioned-grinex-exchange-suspends-operations
sha256:5da74f0ceb48925b547d27dff5127078b5cf75078463d62134fa63c51c26cb2a
What we pulled out
Deterministic extractor (IOC + allowlisted tokens + ATT&CK IDs present in DB).
Indicators
Linked with report → mentions → indicator. Values open the indicator workspace.
No indicators linked for this report.
Malware families
Allowlist token matches only.
Threat actors mentioned
Allowlist mentions — not a formal attribution verdict.
ATT&CK techniques
MITRE IDs referenced in text and present in local technique table.
CONTINUE INVESTIGATION
High-signal pivots without leaving the thread you started in search.
Browse the report corpus.