Arab Press

بالشعب و للشعب
Monday, Mar 09, 2026

Seven Russians sanctioned over ransomware cyber-crime

Seven Russians sanctioned over ransomware cyber-crime

Seven Russian men have been sanctioned by the UK and US for having links to recent ransomware attacks.

The UK's Foreign Office, along with US authorities, has released pictures of the men, frozen their assets and imposed travel restrictions.

US authorities have accused them of being members of loosely defined Russian-based hacking network Trickbot.

Ransomware strains Conti and Ryuk extorted at least £27m in ransoms from 149 British victims.

"This is a hugely significant moment for the UK and our collaborative efforts with the US to disrupt international cyber-criminals," said National Crime Agency director general Graeme Biggar.

"The sanctions are the first of their kind for the UK and signal the continuing campaign targeting those responsible for some of the most sophisticated and damaging ransomware that has impacted the UK and our allies," he said.

Mikhail Iskritskiy also known as (aka) Tropa and Valery Sedletski aka Strix are on the new cyber sanctions list

The National Cyber Security Centre, a part of GCHQ, has assessed that key group members are "highly likely" to have strong links to the Russian Intelligence Services from which they are sometimes directed.

No evidence was supplied to support this allegation.

The UK government categorises ransomware as a tier one national security threat with recent victims including UK schools, local authorities and firms.

The individuals sanctioned are: Vitaliy Kovalev, Valery Sedletski, Valentin Karyagin, Maksim Mikhailov, Dmitry Pleshevskiy, Mikhail Iskritskiy and Ivan Vakhromeyev.

Any arrests are impossible unless the accused leave the country.

The group behind the Conti strain has targeted hospitals, schools, businesses and local authorities, including the Scottish Environment Protection Agency.  It extorted $180m (£148m) in ransomware in 2021 alone, according to research from Chainalysis.

Ireland's Health Service Executive was targeted by Conti ransomware actors during the Covid pandemic, leading to disruption to blood tests, X-rays, CT scans, radiotherapy and chemotherapy appointments over 10 days. 

Another recent ransomware attack included Harrogate-based transportation and cold storage firm Reed Boardall, whose IT systems were under attack for nearly a week in 2021.

Although Conti disbanded in 2022, its members are thought to have continued their attacks under different guises.

Russia has for years denied that it is harbouring ransomware hackers, but cyber-security experts say there is compelling evidence that many of the criminal groups are co-ordinated from the country.

Many of the gangs operate on Russian-language forums, there are fewer attacks on Russian organisations, and the frequency of hacks dips during Russian public holidays.

The latest sanctions follow multinational efforts to disrupt ransomware crews, most recently by sabotaging the Hive ransomware crew and taking them offline.

Previously the US and UK worked together on sanctions issued against alleged members of cyber-crime group Evil Corp in 2020. Authorities allege that some of the men in the latest sanctions could have formerly worked for the group.

In 2021 the BBC went to Russia to try to track down the group and was told by a family member that the sanctions had made them fear for their safety.


Businesses are being held to ransom by callous Ryuk cyber-criminals


Newsletter

Related Articles

Arab Press
0:00
0:00
Close
Saudi Crown Prince Holds Strategic Calls With Spanish and Ukrainian Leaders Amid Regional Tensions
Kuwait’s Jazeera Airways Shifts Operations to Saudi Arabia Amid Regional Airspace Disruptions
Saudi Arabian Grand Prix: Why Jeddah’s Night Race Has Become One of Formula One’s Most Distinctive Events
F1 Leadership Addresses Bahrain and Saudi Arabia Races as Middle East Conflict Raises Safety Concerns
Zelenskyy Offers Saudi Crown Prince Assistance to Counter Iranian Drone Threat
Seventh U.S. Service Member Dies from Injuries After Iranian Strike in Saudi Arabia
Civilian Infrastructure Increasingly Hit as Iran Conflict Expands and Saudi Arabia Reports First Fatalities
Saudi Arabia Warns Iran to Halt Attacks and Signals Potential Retaliation
US Embassy in Riyadh Issues Security Alert Urging Americans to Shelter in Place Amid Regional Attacks
Projectile Strike on Saudi Residential Building Kills Two as Regional Conflict Expands
Saudi Arabia Warns Iran While Expanding Diplomatic Efforts to Contain Widening Middle East War
Iran’s President Rejects U.S. Surrender Demand as Drone and Missile Strikes Hit Gulf States
Saudi Arabia Intercepts Drone Swarm Targeting Strategic Shaybah Oil Field
Pakistan Faces Growing Pressure to Balance Ties With Iran and Saudi Arabia as Regional War Intensifies
Middle East Conflict Tests Mohammed bin Salman’s Vision to Transform Saudi Arabia Into a Global Hub
Proposed U.S.–Saudi Nuclear Deal Could Ease Traditional Nonproliferation Requirements
Iran Claims Strike on U.S.-Linked Oil Tanker Near Saudi Waters as Maritime Tensions Escalate
Saudi Arabia Says Air Defences Destroyed 23 Drones and Three Missiles Amid Escalating Regional Conflict
Saudi Arabia Warns Iran Against ‘Miscalculation’ After Missile and Drone Attacks Across Gulf
Iranian Missiles Intercepted Across Gulf as Air Defences Activate in Saudi Arabia, Qatar, UAE and Bahrain
U.S. Justice Department Pursues Criminal Cases Against Cuban Officials in New Legal Push
Abrupt Cancellation of U.S. Army Exercise Sparks Speculation Over Possible Middle East Deployment
Saudi Arabia Led OPEC Output Surge Ahead of Iran Strikes, Survey Finds
Cristiano Ronaldo Travels to Spain for Hamstring Treatment After Injury in Saudi Pro League Match
Saudi Aramco Reroutes Oil to Red Sea as Strait of Hormuz Disruptions Hit Gulf Exports
Saudi Arabia Presses Ahead With Economic Diversification Despite Fiscal and External Deficits
Middle East Conflict Puts Bahrain and Saudi Arabian Formula One Races at Risk
Iran Targets Israeli Diplomatic Site in Bahrain and US Air Base in Qatar as Regional Conflict Expands
Saudi Arabia Intercepts Three Ballistic Missiles Targeting Prince Sultan Air Base
Iran Launches Fresh Missile and Drone Attacks Across Middle East as Regional War Intensifies
Saudi Arabia Opens Direct Communication Channel With Iran in Bid to Prevent Wider Regional War
Saudi Arabia Maintains Strong Fiscal Position Despite Global Uncertainty, Finance Ministry Says
Saudi Arabia Considers Response After Iranian Drone Strike Hits Major Northern Oil Refinery
Saudi Carrier Flynas Plans Limited Flight Resumption to Dubai Amid Regional Tensions
Saudi Arabia and UAE Pledge Close Coordination to Secure Oil Supplies for Japan
Middle East Conflict Casts Doubt Over Bahrain and Saudi Arabian Formula One Races
Iran Rejects Claims of Attacks on Türkiye, Azerbaijan, Saudi Arabia and Oman
Saudi Arabia Condemns Iranian Strikes Targeting Türkiye and Azerbaijan
Saudi Pro League Orders Clubs to Continue Matches Despite Escalating Regional Conflict
Saudi Arabia Scrambles to Redirect Oil Exports as Gulf Storage Nears Capacity
U.S. Embassy in Riyadh Issues Emergency Security Alert After Drone Strike and Escalating Regional Threats
Iran Expresses Gratitude to Saudi Arabia for Closing Airspace During Escalating Conflict
Saudi Arabia Fears Iranian Strikes Could Target Senior Leaders as Regional War Escalates
Iran Says Its Strikes Target Only U.S. Military Assets and Denies Attacking Saudi Arabia
Drone Strike Hits U.S. Embassy in Riyadh as Middle East Conflict Escalates
Tom Brady’s Saudi Flag Football Event May Shift to U.S. as Middle East Conflict Disrupts Plans
Iran War Strikes Saudi Arabia at a Critical Moment for Its Economic Transformation
Saudi Cabinet Declares Kingdom Will Take All Necessary Measures to Defend National Security
United States Urges Citizens to Leave Fourteen Middle Eastern Countries as Iran War Escalates
Saudi Aramco’s Ras Tanura Refinery Targeted Again in Second Drone Attack Within Two Days
×