London Daily

Focus on the big picture.
Friday, Mar 27, 2026

Seven Russians sanctioned over ransomware cyber-crime

Seven Russians sanctioned over ransomware cyber-crime

Seven Russian men have been sanctioned by the UK and US for having links to recent ransomware attacks.

The UK's Foreign Office, along with US authorities, has released pictures of the men, frozen their assets and imposed travel restrictions.

US authorities have accused them of being members of loosely defined Russian-based hacking network Trickbot.

Ransomware strains Conti and Ryuk extorted at least £27m in ransoms from 149 British victims.

"This is a hugely significant moment for the UK and our collaborative efforts with the US to disrupt international cyber-criminals," said National Crime Agency director general Graeme Biggar.

"The sanctions are the first of their kind for the UK and signal the continuing campaign targeting those responsible for some of the most sophisticated and damaging ransomware that has impacted the UK and our allies," he said.

Mikhail Iskritskiy also known as (aka) Tropa and Valery Sedletski aka Strix are on the new cyber sanctions list

The National Cyber Security Centre, a part of GCHQ, has assessed that key group members are "highly likely" to have strong links to the Russian Intelligence Services from which they are sometimes directed.

No evidence was supplied to support this allegation.

The UK government categorises ransomware as a tier one national security threat with recent victims including UK schools, local authorities and firms.

The individuals sanctioned are: Vitaliy Kovalev, Valery Sedletski, Valentin Karyagin, Maksim Mikhailov, Dmitry Pleshevskiy, Mikhail Iskritskiy and Ivan Vakhromeyev.

Any arrests are impossible unless the accused leave the country.

The group behind the Conti strain has targeted hospitals, schools, businesses and local authorities, including the Scottish Environment Protection Agency.  It extorted $180m (£148m) in ransomware in 2021 alone, according to research from Chainalysis.

Ireland's Health Service Executive was targeted by Conti ransomware actors during the Covid pandemic, leading to disruption to blood tests, X-rays, CT scans, radiotherapy and chemotherapy appointments over 10 days. 

Another recent ransomware attack included Harrogate-based transportation and cold storage firm Reed Boardall, whose IT systems were under attack for nearly a week in 2021.

Although Conti disbanded in 2022, its members are thought to have continued their attacks under different guises.

Russia has for years denied that it is harbouring ransomware hackers, but cyber-security experts say there is compelling evidence that many of the criminal groups are co-ordinated from the country.

Many of the gangs operate on Russian-language forums, there are fewer attacks on Russian organisations, and the frequency of hacks dips during Russian public holidays.

The latest sanctions follow multinational efforts to disrupt ransomware crews, most recently by sabotaging the Hive ransomware crew and taking them offline.

Previously the US and UK worked together on sanctions issued against alleged members of cyber-crime group Evil Corp in 2020. Authorities allege that some of the men in the latest sanctions could have formerly worked for the group.

In 2021 the BBC went to Russia to try to track down the group and was told by a family member that the sanctions had made them fear for their safety.


Businesses are being held to ransom by callous Ryuk cyber-criminals


Newsletter

Related Articles

0:00
0:00
Close
Jaguar Land Rover Halts Production at UK Plant Amid Supplier Disruption
UK Police Reverse Position, Confirm Arrests Will Resume for Palestine Action Protests
UK Small Businesses Face Europe’s Steepest Cost Pressures, New Survey Reveals
US Envoy Urges UK to Proceed with King’s Visit Amid Diplomatic Sensitivities
FTSE 100 Drops Over One Percent as Middle East Tensions Weigh on Markets
UK CO2 Plant Set to Reopen as Authorities Move to Safeguard Supplies Amid Middle East Tensions
Trump Urges Stronger Defence Investment as He Questions Allied Naval Capabilities
New COVID Variant Detected in UK Raises Concerns Over Vaccine Effectiveness
FTSE Russell Moves to Standardise Free-Float Rules for UK and International Listings
HBO Max Launches in UK and Ireland, Marking Major Step in Global Streaming Expansion
UK Signals Readiness to Seize Russian ‘Shadow Fleet’ Vessels in Escalation of Sanctions Enforcement
Escalating Middle East Conflict Seen as Major Threat to UK Economic Stability
Early Challenges Mark Prince Harry and Meghan’s Australia Visit
UK Government Rejects Cover-Up Claims After Theft of Former PM Aide’s Phone
Cyprus Opens Strategic Talks with UK Over Sovereign Base Areas
UK Faces Risk of Sharp Inflation Surge Despite Stable Pre-Crisis Figures
UK Police Arrest Two Over Suspected Antisemitic Arson as Iran Link Investigated
UK Inflation Holds at Three Percent Ahead of Oil Price Shock from Iran Conflict
UK Fuel Prices Face Upward Pressure as Global Oil Trends Raise Cost Outlook
Girlguiding UK Sets September Deadline for Membership Policy Change Affecting Trans Participants
Germany and UK Accelerate Wind Power Expansion to Strengthen Energy Security
UK Moves to Ban Cryptocurrency Donations to Political Parties Over Foreign Influence Concerns
UK and Turkey Finalise Major Air Defence Agreement Worth Billions
Apple Introduces Mandatory Age Verification for iPhone Users in the UK
Diverging Views Emerge Over Meghan Markle’s Planned Australia Appearance
Trump Signals Frustration with UK Leadership Amid Diverging Approaches to Iran Conflict
UK Government Takes Control of Hunterston B as Landmark Nuclear Decommissioning Begins
UK Public Inflation Expectations Jump Sharply in March, Raising Pressure on Bank of England
UK Ministers Warn Expanded North Sea Drilling Would Deepen Exposure to Global Energy Volatility
Delayed UK Defence Investment Plan Leaves Suppliers Under Severe Financial Strain
Can Iran Strike the UK? Assessing the Real Military Threat as Conflict Escalates
Sanctioned Iranian Banker Linked to Luxury Marbella Villa Through UK Corporate Structure
Casey Bloys Navigates HBO Max UK Launch, Paramount Integration and Industry Buzz Over Netflix Meeting
Iran Conflict Sparks Sharp Turbulence in UK Mortgage Market, Reaching Pandemic-Era Disruption Levels
Major Donor Urges University of Kentucky to Reconsider Mitch Barnhart’s Post-Retirement Role
United Kingdom Moves to Lead International Effort to Reopen Strait of Hormuz
UK Police Investigate Targeted Attack on Jewish Ambulance Vehicles
UK Police Investigate Targeted Attack on Jewish Ambulance Vehicles
Senior UK Advocate Criticises Barnhart Retirement Appointment, Calls for Reconsideration
UK Finds No Evidence of Direct Iranian Threat to Britain, Says Prime Minister Starmer
Assessing Iran’s Strike Capability and the UK’s Readiness Amid Rising Tensions
NATO Unable to Confirm Iran’s Role in Strike on UK-US Base as Tehran Denies Involvement
University of Kentucky’s Youling Xiong Receives SEC Faculty Achievement Award for 2026
Trump Highlights Satirical Portrayal of UK Leadership Amid Talks with Prime Minister Starmer on Iran Conflict
Trump Highlights Satirical Portrayal of UK Leadership Amid Talks with Prime Minister Starmer on Iran Conflict
UK Fuel Prices Surge Toward Crisis Levels as Experts Warn of Further Sharp Increases
UK Fuel Prices Surge Toward Crisis Levels as Experts Warn of Further Sharp Increases
Duchess of Sussex Secures ‘As Ever’ Trademark Rights in Australia Ahead of High-Profile Visit
UK Reaffirms Security as Officials Reject Claims of Immediate Iranian Missile Threat
Rising Middle East Tensions Spark ‘Trumpflation’ Debate Over Impact on UK Households
×