Arab Press

بالشعب و للشعب
Sunday, Apr 05, 2026

Seven Russians sanctioned over ransomware cyber-crime

Seven Russians sanctioned over ransomware cyber-crime

Seven Russian men have been sanctioned by the UK and US for having links to recent ransomware attacks.

The UK's Foreign Office, along with US authorities, has released pictures of the men, frozen their assets and imposed travel restrictions.

US authorities have accused them of being members of loosely defined Russian-based hacking network Trickbot.

Ransomware strains Conti and Ryuk extorted at least £27m in ransoms from 149 British victims.

"This is a hugely significant moment for the UK and our collaborative efforts with the US to disrupt international cyber-criminals," said National Crime Agency director general Graeme Biggar.

"The sanctions are the first of their kind for the UK and signal the continuing campaign targeting those responsible for some of the most sophisticated and damaging ransomware that has impacted the UK and our allies," he said.

Mikhail Iskritskiy also known as (aka) Tropa and Valery Sedletski aka Strix are on the new cyber sanctions list

The National Cyber Security Centre, a part of GCHQ, has assessed that key group members are "highly likely" to have strong links to the Russian Intelligence Services from which they are sometimes directed.

No evidence was supplied to support this allegation.

The UK government categorises ransomware as a tier one national security threat with recent victims including UK schools, local authorities and firms.

The individuals sanctioned are: Vitaliy Kovalev, Valery Sedletski, Valentin Karyagin, Maksim Mikhailov, Dmitry Pleshevskiy, Mikhail Iskritskiy and Ivan Vakhromeyev.

Any arrests are impossible unless the accused leave the country.

The group behind the Conti strain has targeted hospitals, schools, businesses and local authorities, including the Scottish Environment Protection Agency.  It extorted $180m (£148m) in ransomware in 2021 alone, according to research from Chainalysis.

Ireland's Health Service Executive was targeted by Conti ransomware actors during the Covid pandemic, leading to disruption to blood tests, X-rays, CT scans, radiotherapy and chemotherapy appointments over 10 days. 

Another recent ransomware attack included Harrogate-based transportation and cold storage firm Reed Boardall, whose IT systems were under attack for nearly a week in 2021.

Although Conti disbanded in 2022, its members are thought to have continued their attacks under different guises.

Russia has for years denied that it is harbouring ransomware hackers, but cyber-security experts say there is compelling evidence that many of the criminal groups are co-ordinated from the country.

Many of the gangs operate on Russian-language forums, there are fewer attacks on Russian organisations, and the frequency of hacks dips during Russian public holidays.

The latest sanctions follow multinational efforts to disrupt ransomware crews, most recently by sabotaging the Hive ransomware crew and taking them offline.

Previously the US and UK worked together on sanctions issued against alleged members of cyber-crime group Evil Corp in 2020. Authorities allege that some of the men in the latest sanctions could have formerly worked for the group.

In 2021 the BBC went to Russia to try to track down the group and was told by a family member that the sanctions had made them fear for their safety.


Businesses are being held to ransom by callous Ryuk cyber-criminals


Newsletter

Related Articles

Arab Press
0:00
0:00
Close
Saudi Arabia Unveils Ambition to Establish Prestigious Global Prize Rivaling the Nobel
Saudi Crown Prince to Engage Wall Street in Push for Investment and Economic Expansion
Iran Accuses Saudi Arabia and UAE After Downing of Chinese-Made Drone
Saudi Arabia Condemns Attack on Hospital in Sudan, Calls for Protection of Civilians
Coordinated Drone Strike Targets CIA Facility Within US Embassy in Saudi Arabia
Italy’s Meloni Prioritises Energy Security and Strait of Hormuz Stability During Gulf Tour
Uncertainty Emerges Over Timeline and Direction of Saudi Arabia’s Ambitious Ski Resort Project
UAE and Saudi Arabia Escalate Strategy with Drone Operations Targeting Iran
Trump Delivers Characteristic Remarks on Saudi Crown Prince Amid Intensifying Iran Conflict
Drone Strike on US Embassy in Riyadh Caused Greater Damage Than First Reported
Saudi Arabia Introduces Flexible Solutions for Expired Visas Amid Regional Disruptions
Saudi Arabia’s Online Car Market Accelerates with AI Pricing and Fully Digital Buying Experience
Saudi Arabia Reassesses Defence Strategy as Iranian Drone Threat Drives Shift in Military Partnerships
Drone Strikes Target Saudi Arabia, Kuwait and Bahrain as Regional Conflict Intensifies
Japan and Saudi Arabia Align Efforts to Ease Rising Tensions with Iran
Saudi Crown Prince and Italy’s Meloni Strengthen Strategic Ties in High-Level Talks
SpaceX Explores Potential Five Billion Dollar Investment from Saudi Sovereign Wealth Fund Ahead of IPO
Saudi Arabia Lifts Key Import Barriers to Expand Access for U.S. Beef Exports
Saudi Arabia Enforces Strict Travel Penalties for Visits to Restricted Countries
Italy’s Meloni Embarks on Strategic Gulf Tour to Address Energy Security and Regional Stability
Saudi Film Festival Rescheduled to Summer as Regional Tensions Continue
Saudi Arabia Reports Forty Two Point Six Billion Dollars in Foreign Tourist Spending in 2025
Saudi Crown Prince and Russian President Hold Strategic Call on Escalating Regional Crisis
Saudi Arabia Advances Rail Network as Strategic Alternative to Strait of Hormuz Shipping Route
Ruanyun Edai Launches Saudi Arabia Hub With Forecast of Ten Percent Revenue Growth
Greek Defence Minister Visits Troops in Saudi Arabia Following Successful Missile Interception
Saudi Arabia Expands Global Strategy With Focus on African Critical Minerals
SpaceX Explores Potential Five Billion Dollar Investment From Saudi Fund Ahead of Possible IPO
US Central Command Dismisses Iranian Claim of Mass Casualties Among American Personnel in Saudi Arabia
Co-Diagnostics to Establish Molecular Diagnostics Facility in Saudi Arabia Through Joint Venture
Trump Engages Saudi Crown Prince in Talks on Potential Iran Ceasefire
Saudi Arabia’s Sadara Suspends Operations as Supply Chain Disruptions Intensify
Saudi Arabia Accelerates Energy Shift by Trading Oil Revenues for Battery Investments
Saudi Arabia Introduces Flexible Options for Expired Visas Amid Regional Disruptions
Online Narratives Surge as Iran–US Tensions Spill Into Digital Arena Following Trump Remarks
Saudi Arabia Urges Trump to Seize Strategic Moment as UAE Weighs Ground Deployment
Saudi Arabia Redirects Nearly One Million Barrels of Oil Daily Away from Strait of Hormuz
Saudi Arabia Carries Out Execution of Businessman Linked to 2011 Qatif Unrest
Ukraine–Saudi Defense Pact Signals Rising Demand for Battlefield Expertise
Saudi Arabia Balances Diplomacy and Defense Preparedness Amid Iran Conflict
Iran Conflict Reshapes Strategic Calculations in U.S.-Saudi Relations
Saudi Arabia Voices Caution as Trump’s Assertive War Strategy Reshapes Regional Dynamics
Saudi Arabia Updates Travel Advisory as Regional Conflict Intensifies
Saudi Arabia’s Sadara Suspends Petrochemical Production as Conflict Disrupts Operations
Iran Urges Saudi Arabia to Remove US Forces Amid Escalating Regional Tensions
Gulf Allies Urge Trump to Sustain Campaign Until Iran Is Fully Defeated
Saudi Arabia Unveils Strategic Rail Freight Corridors Connecting Gulf Ports to Jordan
Saudi Arabia Intercepts Drones and Ballistic Missiles in Major Defensive Operation
Houthi Escalation Opens New Front in Expanding Iran-Linked Conflict
Major Saudi Chemical Plant Halts Operations Amid Regional Conflict Disruptions
×