Arab Press

بالشعب و للشعب
Sunday, Mar 29, 2026

Seven Russians sanctioned over ransomware cyber-crime

Seven Russians sanctioned over ransomware cyber-crime

Seven Russian men have been sanctioned by the UK and US for having links to recent ransomware attacks.

The UK's Foreign Office, along with US authorities, has released pictures of the men, frozen their assets and imposed travel restrictions.

US authorities have accused them of being members of loosely defined Russian-based hacking network Trickbot.

Ransomware strains Conti and Ryuk extorted at least £27m in ransoms from 149 British victims.

"This is a hugely significant moment for the UK and our collaborative efforts with the US to disrupt international cyber-criminals," said National Crime Agency director general Graeme Biggar.

"The sanctions are the first of their kind for the UK and signal the continuing campaign targeting those responsible for some of the most sophisticated and damaging ransomware that has impacted the UK and our allies," he said.

Mikhail Iskritskiy also known as (aka) Tropa and Valery Sedletski aka Strix are on the new cyber sanctions list

The National Cyber Security Centre, a part of GCHQ, has assessed that key group members are "highly likely" to have strong links to the Russian Intelligence Services from which they are sometimes directed.

No evidence was supplied to support this allegation.

The UK government categorises ransomware as a tier one national security threat with recent victims including UK schools, local authorities and firms.

The individuals sanctioned are: Vitaliy Kovalev, Valery Sedletski, Valentin Karyagin, Maksim Mikhailov, Dmitry Pleshevskiy, Mikhail Iskritskiy and Ivan Vakhromeyev.

Any arrests are impossible unless the accused leave the country.

The group behind the Conti strain has targeted hospitals, schools, businesses and local authorities, including the Scottish Environment Protection Agency.  It extorted $180m (£148m) in ransomware in 2021 alone, according to research from Chainalysis.

Ireland's Health Service Executive was targeted by Conti ransomware actors during the Covid pandemic, leading to disruption to blood tests, X-rays, CT scans, radiotherapy and chemotherapy appointments over 10 days. 

Another recent ransomware attack included Harrogate-based transportation and cold storage firm Reed Boardall, whose IT systems were under attack for nearly a week in 2021.

Although Conti disbanded in 2022, its members are thought to have continued their attacks under different guises.

Russia has for years denied that it is harbouring ransomware hackers, but cyber-security experts say there is compelling evidence that many of the criminal groups are co-ordinated from the country.

Many of the gangs operate on Russian-language forums, there are fewer attacks on Russian organisations, and the frequency of hacks dips during Russian public holidays.

The latest sanctions follow multinational efforts to disrupt ransomware crews, most recently by sabotaging the Hive ransomware crew and taking them offline.

Previously the US and UK worked together on sanctions issued against alleged members of cyber-crime group Evil Corp in 2020. Authorities allege that some of the men in the latest sanctions could have formerly worked for the group.

In 2021 the BBC went to Russia to try to track down the group and was told by a family member that the sanctions had made them fear for their safety.


Businesses are being held to ransom by callous Ryuk cyber-criminals


Newsletter

Related Articles

Arab Press
0:00
0:00
Close
Modi and Saudi Crown Prince Emphasise Secure Shipping Routes in Talks on West Asia Conflict
Dallas-Based Company Secures One Billion Dollar Hotel Development Deal in Saudi Arabia
Zelensky Secures Defence Cooperation Deals with Gulf States During Strategic Regional Tour
Trump Calls on Saudi Arabia to Join Abraham Accords in Push for Expanded Middle East Cooperation
Trump Balances Humor and Praise in Remarks on Saudi Crown Prince
Saudi Arabia’s Strategic Pipeline Reaches Seven Million Barrel Capacity to Bypass Hormuz
Rubio Signals U.S. Could Conclude Iran Conflict Within Weeks as Air Campaign Intensifies
More Than a Dozen U.S. Soldiers Injured in Saudi Base Attack as Iran-Backed Houthis Expand Conflict
Iranian Strike on US Base in Saudi Arabia Injures Troops and Damages Aircraft
Pakistan to Convene Regional Talks with Saudi Arabia, Turkey and Egypt Amid Iran War Diplomacy
Ukraine and Saudi Arabia Reach ‘Mutually Beneficial’ Defence Agreement
Ukraine to Share Battlefield Expertise with Saudi Arabia Under New Defence Agreement
Trump Takes Center Stage at Saudi Arabia’s FII Miami Amid Escalating Iran Conflict
Gulf States Explore Pipeline Routes to Bypass Strait of Hormuz Amid Rising Tensions
Iran Conflict Drives Saudi Arabia to Deepen Security Ties with Ukraine
Saudi Arabia Reviews Desert Ski Resort Plans with Cancellation of Key Building Contracts
Saudi Arabia Targets Business Hotel Shortfall with $1 Billion Development Push
Iran and Allied Forces Intensify Strikes on Energy Sites and Urban Areas Across Region
Ukraine and Saudi Arabia Formalise Defence Cooperation Agreement, Zelenskiy Announces
Saudi Arabia Reportedly Presses US to Intensify Operations Against Iran
Saudi Arabia Expands Maritime Network with Launch of Six New Shipping Services
Saudi Arabia Launches FII Summit Amid Heightened Focus on Global Stability and Investment Risks
Saudi Arabia’s HUMAIN Secures First US Customer in Expansion of AI Capabilities
Saudi Arabia Calls on US to Seize Strategic Opportunity to Reshape the Middle East
Saudi Arabia’s Strategic Investments Help Shape Silicon Valley’s Rise
Saudi Arabia Announces Passing of King Abdullah, Marking End of an Era
Saudi Arabia May Shift From Neutrality to Retaliation if Houthi Attacks Escalate, Experts Warn
UAE and Saudi Arabia Urge Decisive US Action on Iran as Regional Pressure Intensifies
Zelensky Visits Saudi Arabia After Offering Ukraine’s Drone Expertise
Saudi Arabia Pauses Ambitious Desert Ski Project Amid Strategic Reassessment
Trump Set for Palm Beach Return Following Saudi-Backed Summit in Miami
Saudi Arabia Accelerates Yanbu Oil Exports Toward Five Million Barrel Target
Report Highlights Saudi-US Security Discussions as Trump Administration Evaluates Iran Strategy
Saudi Arabia’s Humain Commits Three Billion Dollars to Elon Musk’s xAI in Strategic Technology Push
Saudi Arabia Signals Firm Shift in Iran Policy, Declares Coexistence No Longer Viable
Saudi Clubs Prepare Major Push to Sign Mohamed Salah Amid Growing Transfer Speculation
Saudi Arabia Rejects Claims It Seeks to Prolong Regional Conflict
Saudi Arabia Condemns Iranian Actions and Signals Firm Shift Toward Stronger Response
Saudi Arabia Reassesses Strategic Approach as Regional Tensions with Iran Intensify
Pakistan Reaffirms Strong Support for Saudi Arabia Following High-Level Visit
Saudi Arabia Expands Regional Trade Links by Opening New Land and Sea Routes to UAE
World Economic Forum Delays Saudi Conference as Regional Conflict Disrupts Global Agenda
Saudi Arabia and UAE Signal Potential Entry into Iran Conflict if Critical Infrastructure Is Targeted
Global Firms Accelerate Expansion into Saudi Arabia as Economic Reforms Gain Momentum
Global Labour Pressure Mounts as ILO Faces Calls to Reject Saudi Bid to Dismiss Migrant Worker Complaint
Gulf Powers Move Closer to Entering Iran Conflict as Regional Pressure Intensifies
Saudi Arabia Breaks Ranks with Regional Allies Over Response to Iran Escalation
Saudi Arabia Moves Closer to Direct Role as Iran Conflict Intensifies
World Economic Forum Postpones Jeddah Meeting Amid Escalating Regional Tensions
Trump to Deliver Keynote Address at Saudi-Backed Investment Summit in Miami Beach
×