Dossier: Sergey Khitrov (Stanton) — Key Member of the Conti Group
Briefly: Who is Sergey Khitrov (Stanton) in the Conti Group
Sergey Khitrov (alias Stanton) is a Russian entrepreneur, founder and organizer of the Blockchain Life forum, and one of the key leaders within the Conti ransomware group. Inside Conti, he was not only a “front” for money laundering but also served as the deputy to the group’s leader (Target), overseeing operator activities and participating in strategic management of attacks.
Role in Conti:
- In leaked internal Conti chats (Rocket.Chat), Sergey Khitrov appears under the nickname Stanton.
- Stylometric analysis confirms that Stanton is indeed Khitrov.
- Khitrov acted as Target’s deputy, directly coordinating operator work and participating in the organization of attacks, especially during autumn 2021 when Conti’s headquarters was based in Dubai.
- He was physically present in Dubai in autumn 2021, from where he helped direct attacks on Western, Asian, and Middle Eastern companies.
- In addition to his organizational and managerial role, Khitrov facilitated the laundering of Conti’s proceeds through the crypto forum, investment projects, and public events, integrating criminal funds into the legal economy.
- He was closely associated with Vitaly Kovalev (Stern), who managed Conti’s financial flows and used Khitrov and his forum as a “clean” front for money laundering.
Early mentions in articles about Conti:
-
Conti Operations in Dubai, Autumn 2021 Khitrov is mentioned as Target’s deputy, arriving in Dubai two days before the main group (October 10, 2021, flight G9-956). Quote:
"These are close friends of Target’s deputy, Sergey Khitrov, who arrived there two days earlier, on October 10, 2021 (flight G9-956)."
-
Blockchain Life: Legalization of Trickbot and Conti Ransomware Proceeds Khitrov is directly named as the organizer of Blockchain Life and linked to Conti’s money laundering. Stylometric analysis confirms that Stanton in Conti chats is Khitrov. Quote:
"Sergey Khitrov is found in Conti Rocket-Chat logs under the nickname Stanton. ... Stylometric analysis confirmed single authorship of the messages." "Stylometric cluster analysis of the Conti chat leaks and Instagram comments by Sergey Khitrov revealed single authorship with the nickname Stanton."
-
Conti Trickbot Leaks Final, April 26, 2025 Khitrov’s role as a front for laundering Conti’s funds through the crypto forum and investment projects is described in detail. Quote:
"He [Stern] needed a flawless facade — and found it in Sergey Khitrov."
Links to early mentions:
- Conti Operations in Dubai, Autumn 2021 (sections 4, 5)
- Blockchain Life: Legalization of Trickbot and Conti Ransomware Proceeds (sections 1–3)
Summary: Sergey Khitrov (Stanton) was the deputy leader of Conti (Target), supervised operator activities, participated in organizing attacks, and was physically present in Dubai during key operations in autumn 2021. At the same time, he acted as the public face for laundering Conti’s funds, integrating criminal proceeds into the legal economy through the crypto forum and investment projects. His role was crucial both for managing the group and for Conti’s financial schemes and public image.
Profile: Stanton based on messages from the Conti Rocket Chat
1. General Information
- Alias: Stanton (identified as Sergey Khitrov based on external sources, travel records, and activity correlations)
- Group: Conti
- Role: Deputy to Target; technical architect, financial intermediary, money launderer
- Language: Russian
2. Direct Connection and Involvement in Conti
- Stanton is one of the key members of Conti, acting as the deputy to Target.
- Actively participates in discussions and implementation of technical infrastructure, financial schemes, and internal communications.
- His nickname appears in the Conti Rocket.Chat logs.
- Interacts with Target, Stern, Professor, and other group members.
3. Functions and Competencies
Technical Architecture and Security
- Expert in anonymous communications: develops secure chat schemes (PGP, RSA, TOR, broadcast encryption).
- Proposes architectural solutions for internal communications focused on maximum OPSEC.
- Advises on security issues, vulnerability identification, and bypassing blocks.
Financial and Organizational Matters
- Facilitator and intermediary: discusses money laundering schemes, tokenization, blockchain, and internal team payments.
- Proficient in economic theory, accounting, and currency provision schemes.
- Acts as a “bridge” between the technical and financial/organizational layers of the group.
- Perceived as a “senior” among technical members, influences strategic decisions, and is highly respected.
4. Technical Competence
- Deep understanding of cryptography, networks, anonymization, and secure system architecture.
- Expert in OPSEC, vulnerabilities, and building secure channels.
- Knowledgeable in economics, accounting, money laundering schemes, tokenization, and blockchain.
5. Confidence Level
- Technical architect, OPSEC expert: 95%
- Facilitator of financial schemes, spammer, launderer: 80%
- Ideologist, mentor, “grey cardinal”: 90%
- Formal leader: 30% (more of an informal but highly influential figure)
6. Conclusion
Stanton is a key technical architect, ideologist, and financial intermediary within the Conti group. His responsibilities include building secure communication infrastructure, implementing OPSEC solutions, participating in financial schemes (laundering, spam, tokenization), as well as mentoring and supporting the team. Stanton possesses a high level of technical and economic expertise, commands respect, and has significant influence over the group’s strategy.
Dossier: KHITROV SERGEY ALEXANDROVICH
1. Basic Information
- Full Name: Khitrov Sergey Alexandrovich
- Date of Birth: January 31, 1994
- Place of Birth: Saint Petersburg
- Citizenship: Russian Federation
- Tax ID (INN): 781438177772
- Social Security Number (SNILS): 167-918-920 26
- Passports:
- 4013929721 (issued by TP 70 OU FMS for St. Petersburg and Leningrad Region, 07.03.2014)
- 0761817507
- 4008471455
- Education: Graduate of ITMO University (Saint Petersburg)
2. Family Connections
- Mother: Khitrova Lyubov Mironovna, 19.01.1961
- Convicted under Article 327 Part 1 of the Criminal Code of the Russian Federation (document forgery):
- 2001, Saint Petersburg
- Noted as: “Person involved in criminal proceedings”, “criminal record”, “criminal cases 2002–2004, Art. 327 part 1”
- Credit scoring restrictions, anti-credit databases — marked as “fraudster”, subject to special records and criminal conviction, likely sentenced up to 2 years.
- Comments: FRAUDSTER - ANTI-CREDIT-SAINT PETERSBURG - SPB CRIMINAL CASE-2002, 2003 - PERSON INVOLVED IN CASE - DETAINED AT ST. ELIZAROVSKAYA METRO CHECKPOINT
- Convicted under Article 327 Part 1 of the Criminal Code of the Russian Federation (document forgery):
- Father: Khitrov Alexander Vasilievich, 26.06.1956
- Twin Brother: Khitrov Alexey Alexandrovich, 31.01.1994
3. Contacts
-
Phones (current and found in various services): +7 962 726-7018 +7 812 491-6015 +7 926 662-1283 +7 921 775-5566 +7 911 153-9052 +7 911 156-9052 +7 925 254-5935 +7 495 620-9191
-
Email: hitrsoft@yandex.ru hitrsoft2@yandex.ru sergkhit94@mail.ru serkhitrov@gmail.com z-armine85@mail.ru
-
Telegram: @serkhitrovtut IDs: 1658757760, 214995240, 272943555, 357211899, 5182373226, 5795150220
- https://x.com/serkhitrov
- https://x.com/BlLife_Forum
-
VK Profiles: https://vk.com/id441755154 https://vk.com/id576900270 https://vk.com/id585248165 https://vk.com/id6208673
4. Residences and Real Estate
- Saint Petersburg: Aviakonstruktorov Ave., 44, building 2, apt. 189 — main registered address
- Moscow: 1st Krasnogvardeysky Proezd, 22, bldg. 1, room 629 — apartment (85.3 sq.m., 62nd floor, owned, 2022)
- Moscow: 1st Krasnogvardeysky Proezd, 22, bldg. 2, parking space #2226 — owned
- Childhood address: Pulkovskoe shosse, 91A, apt. 50 (St. Petersburg), registered until 1999
5. Vehicles
- Lamborghini Urus — VIN: ZPBEA1ZL2MLA14596 (2021)
- McLaren 720S Coupe — O221UH198; VIN: SBM14DCB6JW001883 (530 hp, insurance until 2022)
- Jaguar F-Pace — K007AN198 / E844ME198; VIN: SADCA2BX8KA358206 (insurance until 2022, 300 hp)
- Porsche Panamera 4 — T137XC178; VIN: WP0ZZZ97ZDL001658 (299 hp)
- VAZ 2105 — H452NS98/XTA21053072102283 (71 hp)
- VAZ 2111 — O091CE123/XTA21114060253135 (89 hp)
6. Banking Activity
- Bank cards: Over 40 unique cards and accounts detected (AO Alfa-Bank, MTS-Bank, etc.)
- Financial activity: Listed in the Central Bank of Russia blacklists since 2017 as a participant in suspicious/declined transactions under Federal Law 115 (money laundering, suspicious operations, cash movements).
- Multiple bank transaction refusals (2017, 2023).
7. Entrepreneurial and Business Activity
- LLC "Blockchain Life" — founder and director, well-known brand in the crypto industry (2022)
- LLC "Jet Media Group" — CEO and owner, 90% share, 2018–present, reported revenue ~700,000 RUB/year (2021)
- LLC "ADWAD" — liquidator and former co-owner, 90–10,800 RUB share, 2013–2019
- IE Khitrov Sergey Alexandrovich (OGRNIP 318784700002276, since 2018, St. Petersburg, fields: IT, marketing)
- AO "Alfa-Bank" — indexed as incoming revenue (852,520 RUB, 2021)
- Projects:
- Jets.Capital — management/co-owner of a venture fund for crypto startup investments
- List — crypto project listing agency
8. Blockchain/Crypto
- Key figure in the SPB/Moscow crypto community (Blockchain Life, Jets.Capital)
- Organizer, investor, active public speaker
- Personal and corporate projects (List, Jets.Capital, Blockchain Life) indexed in the market as crypto-listing, venture investment attraction
9. Reputation and Legal Status
- Central Bank of Russia blacklists (2017, 2019, 2021, 2022, 2023):
- Transaction refusals — legalization (laundering) of proceeds, cash, “declined” transactions, special indicators
- Issues with cash settlements and bank transfers (urgently blocked under Federal Law 115)
- Federal Bailiff Service blacklists:
- Multiple debts, enforcement proceedings in 2020–2023 (fines, debts: 500 RUB, 3,000 RUB, 69,286 RUB, 800 RUB, etc.)
- Total debt load as of 2023 — up to 70,000 RUB
10. Travel/Departure from Russia
- Left Russia on 25.09.2022 (mobilization, officially: Bahrain)
- As of 2024 — permanent residence in Moscow, active ties to St. Petersburg
-
Date Transport Country From Country To 10.03.2024 Airplane Turkey Russia 27.02.2024 Airplane Russia Turkey 07.02.2024 Airplane Russia Turkey 14.01.2024 Airplane Georgia Russia 02.01.2024 Airplane Russia Algeria 02.10.2023 Airplane Russia United Arab Emirates 16.09.2023 Airplane United Arab Emirates Russia 03.09.2023 Airplane Russia China 12.08.2023 Airplane Turkey Russia 04.08.2023 Airplane Russia Turkey 11.05.2023 Airplane Turkey Russia 24.04.2023 Airplane Russia Turkey 13.03.2023 Airplane Maldives Russia 23.01.2023 Airplane Russia United Arab Emirates 20.12.2022 Airplane United Arab Emirates Russia 18.11.2022 Airplane Russia United Arab Emirates 16.11.2022 Airplane United Arab Emirates Russia 25.09.2022 Airplane Russia Bahrain 10.08.2022 Airplane Uzbekistan Russia 04.08.2022 Airplane Russia Uzbekistan 28.07.2022 Airplane United Arab Emirates Russia 13.07.2022 Airplane Russia United Arab Emirates 08.07.2022 Airplane United Arab Emirates Russia 05.07.2022 Airplane Russia United Arab Emirates 02.06.2022 Airplane Russia United Arab Emirates 21.05.2022 Airplane Turkey Russia 04.05.2022 Airplane Russia United Arab Emirates 31.03.2022 Airplane United Arab Emirates Russia 11.03.2022 Airplane Russia United Arab Emirates 27.02.2022 Airplane United Arab Emirates Russia 25.02.2022 Airplane Russia United Arab Emirates 25.02.2022 Airplane United Arab Emirates Russia 20.02.2022 Airplane Russia United Arab Emirates 29.01.2022 Airplane Russia United Arab Emirates 16.01.2022 Airplane Maldives Russia 10.01.2022 Airplane Russia Maldives 09.01.2022 Airplane Slovenia Russia 02.01.2022 Airplane Russia Slovenia 15.11.2021 Airplane Qatar Russia 03.11.2021 Airplane Russia Qatar 10.10.2021 Airplane Russia United Arab Emirates 28.09.2021 Airplane Turkey Russia 24.09.2021 Airplane Russia Turkey 29.08.2021 Airplane Croatia Russia 20.08.2021 Airplane Russia Croatia 09.08.2021 Airplane Greece Russia 04.08.2021 Airplane Russia Greece 24.06.2021 Airplane United Arab Emirates Russia 19.06.2021 Airplane Russia United Arab Emirates 29.05.2021 Airplane United Arab Emirates Russia 22.05.2021 Airplane Russia United Arab Emirates 12.05.2021 Airplane Cyprus Russia 03.05.2021 Airplane Russia United States of America 10.04.2021 Airplane Turkey Russia 07.04.2021 Airplane Russia Turkey 05.04.2021 Airplane United Arab Emirates Russia 30.03.2021 Airplane Russia Turkey 14.02.2021 Airplane United Arab Emirates Russia 05.02.2021 Airplane Russia United Arab Emirates 19.01.2021 Airplane Turkey Russia 01.01.2021 Airplane Russia United States of America 15.11.2020 Airplane Tanzania Russia 04.11.2020 Airplane Russia Tanzania 26.08.2020 Airplane Switzerland Russia 22.08.2020 Airplane Russia Switzerland 06.03.2020 Airplane Switzerland Russia 04.03.2020 Airplane Russia Switzerland 19.02.2020 Airplane Germany Russia 05.02.2020 Airplane Russia Germany 23.01.2020 Airplane Poland Russia 20.01.2020 Airplane Russia Poland 14.10.2019 Airplane Armenia Russia 28.05.2019 Airplane Serbia Russia 10.05.2019 Airplane Qatar Russia 19.04.2019 Airplane Russia United Arab Emirates 20.03.2019 Airplane Qatar Russia 11.03.2019 Airplane Russia United Arab Emirates 17.02.2019 Airplane Netherlands Russia 04.02.2019 Airplane Russia Netherlands 30.11.2018 Airplane Singapore Russia 22.11.2018 Airplane Russia Singapore 03.11.2018 Airplane Malta Russia 31.10.2018 Airplane Russia Malta 21.09.2018 Airplane Qatar Russia 17.09.2018 Airplane Russia China 13.09.2018 Airplane Netherlands Russia 26.08.2018 Airplane Qatar Russia 22.08.2018 Airplane Russia Qatar 12.08.2018 Airplane United Arab Emirates Russia 08.08.2018 Airplane Russia United Arab Emirates 05.08.2018 Airplane Turkey Russia 26.07.2018 Airplane Russia Latvia 16.07.2018 Airplane Russia Moldova 05.05.2018 Airplane Russia Singapore 24.02.2018 Airplane Kazakhstan Russia 16.02.2018 Airplane Qatar Russia 05.02.2018 Airplane Russia Qatar 11.01.2018 Airplane Finland Russia 28.10.2017 Airplane Russia Austria