Arab Press

بالشعب و للشعب
Monday, Mar 16, 2026

Seven Russians sanctioned over ransomware cyber-crime

Seven Russians sanctioned over ransomware cyber-crime

Seven Russian men have been sanctioned by the UK and US for having links to recent ransomware attacks.

The UK's Foreign Office, along with US authorities, has released pictures of the men, frozen their assets and imposed travel restrictions.

US authorities have accused them of being members of loosely defined Russian-based hacking network Trickbot.

Ransomware strains Conti and Ryuk extorted at least £27m in ransoms from 149 British victims.

"This is a hugely significant moment for the UK and our collaborative efforts with the US to disrupt international cyber-criminals," said National Crime Agency director general Graeme Biggar.

"The sanctions are the first of their kind for the UK and signal the continuing campaign targeting those responsible for some of the most sophisticated and damaging ransomware that has impacted the UK and our allies," he said.

Mikhail Iskritskiy also known as (aka) Tropa and Valery Sedletski aka Strix are on the new cyber sanctions list

The National Cyber Security Centre, a part of GCHQ, has assessed that key group members are "highly likely" to have strong links to the Russian Intelligence Services from which they are sometimes directed.

No evidence was supplied to support this allegation.

The UK government categorises ransomware as a tier one national security threat with recent victims including UK schools, local authorities and firms.

The individuals sanctioned are: Vitaliy Kovalev, Valery Sedletski, Valentin Karyagin, Maksim Mikhailov, Dmitry Pleshevskiy, Mikhail Iskritskiy and Ivan Vakhromeyev.

Any arrests are impossible unless the accused leave the country.

The group behind the Conti strain has targeted hospitals, schools, businesses and local authorities, including the Scottish Environment Protection Agency.  It extorted $180m (£148m) in ransomware in 2021 alone, according to research from Chainalysis.

Ireland's Health Service Executive was targeted by Conti ransomware actors during the Covid pandemic, leading to disruption to blood tests, X-rays, CT scans, radiotherapy and chemotherapy appointments over 10 days. 

Another recent ransomware attack included Harrogate-based transportation and cold storage firm Reed Boardall, whose IT systems were under attack for nearly a week in 2021.

Although Conti disbanded in 2022, its members are thought to have continued their attacks under different guises.

Russia has for years denied that it is harbouring ransomware hackers, but cyber-security experts say there is compelling evidence that many of the criminal groups are co-ordinated from the country.

Many of the gangs operate on Russian-language forums, there are fewer attacks on Russian organisations, and the frequency of hacks dips during Russian public holidays.

The latest sanctions follow multinational efforts to disrupt ransomware crews, most recently by sabotaging the Hive ransomware crew and taking them offline.

Previously the US and UK worked together on sanctions issued against alleged members of cyber-crime group Evil Corp in 2020. Authorities allege that some of the men in the latest sanctions could have formerly worked for the group.

In 2021 the BBC went to Russia to try to track down the group and was told by a family member that the sanctions had made them fear for their safety.


Businesses are being held to ransom by callous Ryuk cyber-criminals


Newsletter

Related Articles

Arab Press
0:00
0:00
Close
Washington State Pilot Among Six U.S. Airmen Killed in Military Aircraft Crash Over Iraq
Severe Storm Threat Looms Over Washington as Tornado Risk and Damaging Winds Target Mid-Atlantic
Trump Supports FCC Warning to Broadcasters Over Iran War Reporting
Trump Supports FCC Warning to Broadcasters Over Iran War Reporting
Saudi Stocks Edge Lower as Tadawul All Share Index Slips Slightly at Market Close
Iranian Missile and Drone Strike Targets Saudi Arabia’s Prince Sultan Air Base Hosting US Aircraft
Saudi Air Defenses Intercept Drone Over Eastern Province as Iranian Strike Campaign Intensifies
Middle East War Reshapes Gulf Economies as Saudi Arabia and Oman Gain Strategic Leverage While UAE Faces Economic Shock
Iranian Ambassador in Riyadh Blames ‘Enemies’ for Attacks Across the Gulf
Israeli Envoy Ron Dermer Reportedly Visits Saudi Arabia for Discussions on Potential Lebanon Talks
Formula One Cancels Bahrain and Saudi Arabian Grands Prix Scheduled for April
Iran’s Ambassador in Riyadh Rejects Claims Tehran Targeted Saudi Oil Facilities
Saudi Arabia Declares 2026 ‘Year of Artificial Intelligence’ in Major Push for Data-Driven Economy
Saudi Arabia’s 2018 Budget Signals Strong Push for Non-Oil Economic Growth
Pakistan Envoy in Riyadh Says Regional Diplomacy Intensifying to Prevent Wider Middle East War
Saudi Arabia Intercepts Dozens of Drones as Regional Strikes Kill Two in Oman
Saudi Arabia Redirects Oil Exports to Red Sea Ports as Strait of Hormuz Tensions Escalate
Saudi Arabia Intercepts Missile and Drone Barrage as Regional Conflict Intensifies
Iran Expands Drone and Missile Campaign Across Gulf as Conflict With US and Israel Intensifies
Muslims Worldwide Await Saudi Moon Sighting to Confirm Eid al-Fitr 2026 Date
F1 Calendar Faces Major Disruption as Middle East Conflict Threatens Bahrain and Saudi Races
Trump Says Most US Aircraft Hit in Saudi Base Attack Suffered Minimal Damage
Trump Says Most US Aircraft Hit in Saudi Base Attack Suffered Minimal Damage
Strait of Hormuz Crisis Forces Saudi Arabia Into Major Oil Production Shut-In
Strait of Hormuz Crisis Forces Saudi Arabia Into Major Oil Production Shut-In
Saudi Arabia Slashes Oil Output as Strait of Hormuz Crisis Cuts Deep Into Gulf Revenues
Saudi Arabia’s Cultural Scene Presses Ahead as Nation Navigates Regional War
Saudi-Pakistan Defence Pact Faces Real-World Constraints as Iran War Escalates
Saudi Arabia Offers Two Million Barrels of Crude From Red Sea as War Disrupts Gulf Exports
Formula One Faces Tens of Millions in Lost Revenue if Bahrain and Saudi Arabia Races Are Cancelled
Formula One Set to Cancel Bahrain and Saudi Arabian Grands Prix Amid Escalating Middle East War
Saudi Arabia Downs Dozens of Iranian Drones in Major Defensive Operation
Saudi Arabia Cuts Oil Output by About Twenty Percent as Iran War Disrupts Gulf Energy Flows
Formula One Set to Cancel Bahrain and Saudi Arabian Grands Prix Amid Escalating Iran War
Asian Energy Security Tested as Strait of Hormuz Disruption Threatens Oil Supplies
Iran Sets Three Conditions for Ending Regional War as Diplomatic Efforts Intensify
Saudi Arabia Launches Royal Institute of Anthropology to Examine Social Transformation
Pakistan’s Prime Minister Shehbaz Sharif Arrives in Saudi Arabia for High-Level Talks
Saudi Aramco Turns to Ukrainian Drone Interceptors to Shield Oil Infrastructure from Iranian Threats
UK Foreign Secretary Travels to Saudi Arabia to Reinforce Support for Regional Allies
Rising Iran Conflict Casts Shadow Over Saudi Arabia’s $38 Billion Gaming Industry Ambitions
Iran Launches Missile and Drone Strikes Across Gulf as Oil Prices Surge Past $100
Saudi Air Defences Destroy Three Drones Targeting Strategic Shaybah Oil Field
Debate Grows Over Saudi Arabia’s Role in Sudan War Amid US Alliance Questions
Pakistan’s Prime Minister Travels to Saudi Arabia After Discussions With Iranian Leadership
Two Strategic Pipelines Allow Saudi Arabia and the UAE to Bypass the Strait of Hormuz
US Deploys Bunker-Buster Bombs to UK Airbase as Iran Conflict Intensifies
Iran warns of $200 oil as forces target merchant ships in Gulf
Japan to Release 45 Days of Oil Reserves Amid Iran Conflict
Three Commercial Vessels Attacked Near Strait of Hormuz, Thai-Flagged Ship Damaged and Crew Evacuated
×