Seven Russians sanctioned over ransomware cyber-crimeon February 9, 2023 at 4:48 pm

- Advertisement -
- Advertisement -
- Advertisement -
- Advertisement -

UK and US announce rare joint action against the men, including freezing their assets.

Dmitry PleshevskiyImage source, NCA

Seven Russian men have been sanctioned by the UK and US for having links to recent ransomware attacks.

The UK’s Foreign Office, along with US authorities, has released pictures of the men, frozen their assets and imposed travel restrictions.

US authorities have accused them of being members of loosely defined Russian-based hacking network Trickbot.

Ransomware strains Conti and Ryuk extorted at least £27m in ransoms from 149 British victims.

“This is a hugely significant moment for the UK and our collaborative efforts with the US to disrupt international cyber-criminals,” said National Crime Agency director general Graeme Biggar.

“The sanctions are the first of their kind for the UK and signal the continuing campaign targeting those responsible for some of the most sophisticated and damaging ransomware that has impacted the UK and our allies,” he said.

Images of Mikhail Iskritskiy (left) and Valery Sedletski (right)

Image source, National Crime Agency

The National Cyber Security Centre, a part of GCHQ, has assessed that key group members are “highly likely” to have strong links to the Russian Intelligence Services from which they are sometimes directed.

No evidence was supplied to support this allegation.

The UK government categorises ransomware as a tier one national security threat with recent victims including UK schools, local authorities and firms.

The individuals sanctioned are: Vitaliy Kovalev, Valery Sedletski, Valentin Karyagin, Maksim Mikhailov, Dmitry Pleshevskiy, Mikhail Iskritskiy and Ivan Vakhromeyev.

Any arrests are impossible unless the accused leave the country.

The group behind the Conti strain has targeted hospitals, schools, businesses and local authorities, including the Scottish Environment Protection Agency.  It extorted $180m (£148m) in ransomware in 2021 alone, according to research from Chainalysis.

Ireland’s Health Service Executive was targeted by Conti ransomware actors during the Covid pandemic, leading to disruption to blood tests, X-rays, CT scans, radiotherapy and chemotherapy appointments over 10 days. 

Another recent ransomware attack included Harrogate-based transportation and cold storage firm Reed Boardall, whose IT systems were under attack for nearly a week in 2021.

Although Conti disbanded in 2022, its members are thought to have continued their attacks under different guises.

This video can not be played

To play this video you need to enable JavaScript in your browser.

Russia has for years denied that it is harbouring ransomware hackers, but cyber-security experts say there is compelling evidence that many of the criminal groups are co-ordinated from the country.

Many of the gangs operate on Russian-language forums, there are fewer attacks on Russian organisations, and the frequency of hacks dips during Russian public holidays.

The latest sanctions follow multinational efforts to disrupt ransomware crews, most recently by sabotaging the Hive ransomware crew and taking them offline.

Previously the US and UK worked together on sanctions issued against alleged members of cyber-crime group Evil Corp in 2020. Authorities allege that some of the men in the latest sanctions could have formerly worked for the group.

In 2021 the BBC went to Russia to try to track down the group and was told by a family member that the sanctions had made them fear for their safety.

- Advertisement -

Discover

Sponsor

Latest

‘Crisis actor’ conspiracy theory: How anti-vax activists targeted a Covid patienton January 7, 2022 at 3:31 am

Henry Dyne was ill with Covid, but online his story was twisted by anti-vaccine activists.Henry Dyne was ill with Covid, but online his story...

Man City 3-2 RB Leipzig: Champions come from two down to win Group Gon November 28, 2023 at 10:43 pm

Manchester City come from two goals behind to beat RB Leipzig and ensure top spot in Champions League Group G.Manchester City come from two...

BBC launches first Green Sport Awards to celebrate sustainabilityon June 23, 2022 at 4:00 pm

The BBC is launching its first Green Sport Awards - to celebrate individuals and organisations contributing to a more sustainable future.The BBC is launching...

Monkeypox: First case confirmed in Northern Irelandon May 26, 2022 at 12:19 pm

There are 79 cases to date in the UK, according to the PHA, with figures due to be updated later.Image source, Science Photo LibraryNorthern...

Slavery: Rishi Sunak rejects call to apologise and pay reparationson April 26, 2023 at 1:49 pm

The PM says "no" to reparations, adding "trying to unpick our history is not the right way forward".By Joshua NevettBBC PoliticsPrime Minister Rishi Sunak...