London Daily

Focus on the big picture.
Friday, May 29, 2026

Seven Russians sanctioned over ransomware cyber-crime

Seven Russians sanctioned over ransomware cyber-crime

Seven Russian men have been sanctioned by the UK and US for having links to recent ransomware attacks.

The UK's Foreign Office, along with US authorities, has released pictures of the men, frozen their assets and imposed travel restrictions.

US authorities have accused them of being members of loosely defined Russian-based hacking network Trickbot.

Ransomware strains Conti and Ryuk extorted at least £27m in ransoms from 149 British victims.

"This is a hugely significant moment for the UK and our collaborative efforts with the US to disrupt international cyber-criminals," said National Crime Agency director general Graeme Biggar.

"The sanctions are the first of their kind for the UK and signal the continuing campaign targeting those responsible for some of the most sophisticated and damaging ransomware that has impacted the UK and our allies," he said.

Mikhail Iskritskiy also known as (aka) Tropa and Valery Sedletski aka Strix are on the new cyber sanctions list

The National Cyber Security Centre, a part of GCHQ, has assessed that key group members are "highly likely" to have strong links to the Russian Intelligence Services from which they are sometimes directed.

No evidence was supplied to support this allegation.

The UK government categorises ransomware as a tier one national security threat with recent victims including UK schools, local authorities and firms.

The individuals sanctioned are: Vitaliy Kovalev, Valery Sedletski, Valentin Karyagin, Maksim Mikhailov, Dmitry Pleshevskiy, Mikhail Iskritskiy and Ivan Vakhromeyev.

Any arrests are impossible unless the accused leave the country.

The group behind the Conti strain has targeted hospitals, schools, businesses and local authorities, including the Scottish Environment Protection Agency.  It extorted $180m (£148m) in ransomware in 2021 alone, according to research from Chainalysis.

Ireland's Health Service Executive was targeted by Conti ransomware actors during the Covid pandemic, leading to disruption to blood tests, X-rays, CT scans, radiotherapy and chemotherapy appointments over 10 days. 

Another recent ransomware attack included Harrogate-based transportation and cold storage firm Reed Boardall, whose IT systems were under attack for nearly a week in 2021.

Although Conti disbanded in 2022, its members are thought to have continued their attacks under different guises.

Russia has for years denied that it is harbouring ransomware hackers, but cyber-security experts say there is compelling evidence that many of the criminal groups are co-ordinated from the country.

Many of the gangs operate on Russian-language forums, there are fewer attacks on Russian organisations, and the frequency of hacks dips during Russian public holidays.

The latest sanctions follow multinational efforts to disrupt ransomware crews, most recently by sabotaging the Hive ransomware crew and taking them offline.

Previously the US and UK worked together on sanctions issued against alleged members of cyber-crime group Evil Corp in 2020. Authorities allege that some of the men in the latest sanctions could have formerly worked for the group.

In 2021 the BBC went to Russia to try to track down the group and was told by a family member that the sanctions had made them fear for their safety.


Businesses are being held to ransom by callous Ryuk cyber-criminals


Newsletter

Related Articles

0:00
0:00
Close
Japanese Technology Firm Fujitsu Launches Advanced Artificial Intelligence Tool for Corporate Disclosures
South Africa Officially Launches Nationwide Campaign for Highly Contested Local Government Elections
United Kingdom Commits Additional Funding for Unexploded Ordnance Clearance in Laos
Singapore Announces Stringent New Greenhouse Gas Regulations for Commercial Cooling Systems
Cambodia and Thailand Hold High-Level Border Security Talks at United Nations Headquarters
Myanmar Military Government and China Sign Major Agreement to Upgrade Media and Cultural Cooperation
Knife Attack at Swiss Train Station Leaves Three Injured in Suspected Act of Domestic Terrorism
Transnational Extortion Gang Threatens Canadian Police With Army of One Thousand Armed Operatives
Australia Imposes Forty-Two-Day Quarantine on Cruise Ship Passengers Following Deadly Hantavirus Outbreak
International Monetary Fund Unlocks Seven Hundred Million United States Dollars for Sri Lanka Following Economic Reforms
Australia Launches Record One Point Four Billion Dollar Lawsuit Against Chemical Giant 3M Over Contamination
China and Canada Foreign Ministers Meet in Ottawa in Effort to Stabilize Strained Diplomatic Ties
Indonesia Demands Urgent United Nations Security Council Reform Amid Escalating Global Conflicts
Extreme Weather Patterns Trigger Severe Drought in Madagascar and Destructive Flooding in East Africa
Indian State of Karnataka Faces Political Upheaval as Chief Minister Siddaramaiah Abruptly Resigns
Philippines and Japan Reaffirm Defense Ties as Crucial for Indo-Pacific Regional Stability
Norway Joins French Nuclear Deterrence Initiative in Major Shift for European Security Architecture
Global Critical Mineral Alliances Expand as Western Nations Move to Counter Chinese Supply Dominance
United States Imposes Fifty Percent Tariffs on Mexican Steel and Aluminum Ahead of Trade Pact Review
European Union and China Head Toward Major Trade Conflict Over Clean Technology Exports
United States Economic Growth Severely Downgraded to One Point Six Percent as Stagflation Fears Mount
World Health Organization Warns Central African Ebola Epidemic is Outpacing Containment Efforts
United States Treasury Department Conditions Sanctions Relief on Reopening of the Strait of Hormuz
Iranian Air Defenses Intercept and Destroy United States Military Drone Over Bushehr Province
Iranian Armed Forces Launch Ballistic Missiles Toward Unspecified Targets Prompting Regional Condemnation
United Nations Secretary-General Warns Global Order Facing Highest Level of Conflict Since 1945
Israel Issues Sweeping Evacuation Orders in Southern Lebanon Amid Intensified Hezbollah Conflict
Russia Announces Systemic Military Strikes Targeting Ukrainian Defense and Energy Infrastructure
United States and Iranian Negotiators Reach Draft Agreement to Extend Ceasefire and Resume Nuclear Talks
United Nations Security Council Deeply Divided Over United States Capture of Venezuelan President
US and Iran Exchange Direct Military Strikes Amid Fragile Gulf Ceasefire
World Health Organization Warns of Catastrophic Ebola Outbreak in DR Congo
Russia Threatens New Wave of Strikes on Ukrainian Infrastructure and Embassies
Scientists Warn Atlantic Ocean Currents Could Collapse Faster Than Projected
Anthropic Reaches $900 Billion Valuation in Historic AI Funding Round
Washington Imposes Crippling Sanctions on Iranian Maritime Authority
Japan and the Philippines Initiate Strategic Intelligence-Sharing Pact
Microsoft Deploys Autonomous Computer-Using AI Agents to Global Markets
Anthropic Secures $45 Billion Compute Infrastructure Agreement With SpaceX
U.S. Director of National Intelligence Resigns Amid Administration Shakeup
Micron Technology Crosses Trillion-Dollar Valuation Amid Unprecedented Hardware Demand
Canada and Germany Finalize Historic Long-Term LNG Export Agreement
China Expands International Travel Restrictions on Domestic AI Researchers
Japan Approves Sweeping Overhaul of National Intelligence Apparatus
Global Airlines Scramble Logistics as Middle East Airspace Remains Fractured
Japan's Naphtha Imports Plunge 47 Percent Amid Strait of Hormuz Closure
Global Crude Prices Retreat Below $96 as Gulf Tensions Momentarily Ease
Generative AI Outperforms Human Baselines in Landmark Global Creativity Study
NASA Partners With Private Aerospace to Unveil Permanent Lunar Base Architecture
South Korean Equity Markets Surge on Next-Generation Memory Chip Frenzy
×