3C-INT logo [Cyber]Crime Characterization for Intelligence FREE PREVIEW
You are exploring the Free preview. To unlock full read-only access to all public profiles and in-app notifications, create a free research account. For analyst / premium plans capabilities (editing, advanced tabs, exports), please contact us

Threat Actor Characterization

Back
You’re viewing the read-only version. Sign in for analyst tools (editors, promote draft, file/relations management, etc.)
Keonne Rodriguez

Keonne Rodriguez

ID: c285e1e34eadf485dcd28b62175362cc
Cybercrime Cybercriminal
Threat types: Crypto-mixing
United States of America
Updated: 2026-03-01
Created: 2026-02-18
Progress: 70% Completeness: 70% Freshness: 70%
Operation zone: —
Aliases Limited alias preview
KeonneRodriguez — — —
Actor Network Graph
Open Network Graph
Read-only preview for anonymous visitors. Sign in with a free Research account for full workspace.
MITRE ATT&CK®
confidence: high
Actor Techniques page ATT&CK® Diagram

Keonne Rodriguez is publicly identified by U.S. prosecutors as the co-founder/CEO of Samourai Wallet, a Bitcoin wallet and mixing/coordinator service (including Whirlpool and Ricochet) alleged to have facilitated large-scale laundering and operated as an unlicensed money transmitting business. This mapping reflects infrastructure operation relevant to illicit-finance enablement rather than enterprise intrusion tradecraft.


Technique Technique name Tactics Evidence
T1583.001 Domains TA0042
  • 2024-04-24 — Public-facing service operation necessarily relied on domains/web presence used for access and marketing in the case narrative. (INFERENCE (confidence: medium): the exact domains are not enumerated here; focus is on the domain-dependent service model.) · ref
T1583.004 Server TA0042
  • 2024-04-24 — SDNY announcement describes development/operation of a mixer service that implies backend hosting for coordination and service delivery. · ref
  • 2024-09-?? — Superseding indictment describes a server run by Samourai developers handling fees and broadcasting Ricochet transactions to the Bitcoin network. · ref
T1583.006 Web Services TA0042
  • 2024-04-24 — Case narrative includes marketing/operation of an online mixing service, indicating web-service usage as part of the operational footprint. · ref
Strategic Intelligence
Limited preview
Last updated: 2026-02-20T01:45:47+00:00

Keonne Rodriguez — Samourai Wallet co-founder / crypto-mixing service operator (public case)

Classification: TLP: WHITE - Open Source Intelligence (OSINT)

Full strategic intelligence is available in Analyst and Premium plans.
Executive Analyst Brief for CISO
Saved Limited preview

Executive Analyst Brief for CISO — Keonne Rodriguez

Classification: Unclassified / Open Source Intelligence (OSINT) — TLP:WHITE

Upgrade to access the full executive brief.
Tip: Hover the section title to learn what’s included in Analyst / Premium plans.
Executive brief now
Saved successfully.
Hunting Playbook
Saved Limited preview

Hunting Playbook — Keonne Rodriguez (Illicit-Finance Enablement Cluster)


Upgrade to access the full hunting playbook.
Tip: Hover the section title to learn what’s included in Analyst / Premium plans.
Hunting Playbook now
Saved successfully.
IOC Appendix
Saved Limited preview
Last updated: 2026-02-20T01:30:33+00:00

IOC Appendix (TLP:WHITE) — Keonne Rodriguez

More IOC context for Research. Full appendix for Analyst and Premium plans.
IOC Appendix now
Saved successfully.
OSINT Library
Saved Limited preview
Last saved: 2026-02-20T01:30:50+00:00

OSINT Library — Keonne Rodriguez

Curated open-source references (10–15) used to ground the dossier. Links open in a new tab.

Full OSINT references available for Research / Analyst.
OSINT Library now
Saved successfully.
Social Medial & Communication
SOCMINT integrated: 0/1
Address Verification SOCMINT
t.me/Keo************ Restricted Not integrated
Notes: preview mode hides sensitive social/contact details.
Reference Images/Associated Evidence Limited
No images found for this threat.