London Daily

Focus on the big picture.
Sunday, Mar 22, 2026

Seven Russians sanctioned over ransomware cyber-crime

Seven Russians sanctioned over ransomware cyber-crime

Seven Russian men have been sanctioned by the UK and US for having links to recent ransomware attacks.

The UK's Foreign Office, along with US authorities, has released pictures of the men, frozen their assets and imposed travel restrictions.

US authorities have accused them of being members of loosely defined Russian-based hacking network Trickbot.

Ransomware strains Conti and Ryuk extorted at least £27m in ransoms from 149 British victims.

"This is a hugely significant moment for the UK and our collaborative efforts with the US to disrupt international cyber-criminals," said National Crime Agency director general Graeme Biggar.

"The sanctions are the first of their kind for the UK and signal the continuing campaign targeting those responsible for some of the most sophisticated and damaging ransomware that has impacted the UK and our allies," he said.

Mikhail Iskritskiy also known as (aka) Tropa and Valery Sedletski aka Strix are on the new cyber sanctions list

The National Cyber Security Centre, a part of GCHQ, has assessed that key group members are "highly likely" to have strong links to the Russian Intelligence Services from which they are sometimes directed.

No evidence was supplied to support this allegation.

The UK government categorises ransomware as a tier one national security threat with recent victims including UK schools, local authorities and firms.

The individuals sanctioned are: Vitaliy Kovalev, Valery Sedletski, Valentin Karyagin, Maksim Mikhailov, Dmitry Pleshevskiy, Mikhail Iskritskiy and Ivan Vakhromeyev.

Any arrests are impossible unless the accused leave the country.

The group behind the Conti strain has targeted hospitals, schools, businesses and local authorities, including the Scottish Environment Protection Agency.  It extorted $180m (£148m) in ransomware in 2021 alone, according to research from Chainalysis.

Ireland's Health Service Executive was targeted by Conti ransomware actors during the Covid pandemic, leading to disruption to blood tests, X-rays, CT scans, radiotherapy and chemotherapy appointments over 10 days. 

Another recent ransomware attack included Harrogate-based transportation and cold storage firm Reed Boardall, whose IT systems were under attack for nearly a week in 2021.

Although Conti disbanded in 2022, its members are thought to have continued their attacks under different guises.

Russia has for years denied that it is harbouring ransomware hackers, but cyber-security experts say there is compelling evidence that many of the criminal groups are co-ordinated from the country.

Many of the gangs operate on Russian-language forums, there are fewer attacks on Russian organisations, and the frequency of hacks dips during Russian public holidays.

The latest sanctions follow multinational efforts to disrupt ransomware crews, most recently by sabotaging the Hive ransomware crew and taking them offline.

Previously the US and UK worked together on sanctions issued against alleged members of cyber-crime group Evil Corp in 2020. Authorities allege that some of the men in the latest sanctions could have formerly worked for the group.

In 2021 the BBC went to Russia to try to track down the group and was told by a family member that the sanctions had made them fear for their safety.


Businesses are being held to ransom by callous Ryuk cyber-criminals


Newsletter

Related Articles

0:00
0:00
Close
Meghan Markle’s Possible UK Return Sparks Renewed Attention on Sussex Role
Starmer Convenes Urgent Talks on Cost-of-Living Pressures Linked to Iran Conflict
Starmer Convenes Urgent Talks on Cost-of-Living Pressures Linked to Iran Conflict
UK Investors Eye Bargain Shares Ahead of ISA Deadline Amid Market Volatility
UK Investors Eye Bargain Shares Ahead of ISA Deadline Amid Market Volatility
Northern Lights Expected Over UK Skies Tonight Amid Strong Solar Activity
UK Condemns Iran Missile Strike and Warns Against Threats to British Personnel
UK Warns of Global Flight Disruptions as Iran Conflict Escalates Under Trump’s Leadership
UK Condemns Iran After Missile Strike Targets Strategic Diego Garcia Base
Deadly Meningitis Outbreak in UK Reinforces Urgency of Vaccination Campaigns
Iran Launches Long-Range Missile Strike on Remote US-UK Base, Signaling Expanded Reach
Iran Launches Long-Range Missile Strike on Remote US-UK Base, Signaling Expanded Reach
UK Rules Out Cyprus Base Role in Joint US Self-Defence Framework
UK Ends Hereditary Peerage Rights in Parliament in Historic Constitutional Reform
Lord Walney Warns of Expanding Iranian Influence Networks Within the United Kingdom
Iranian National Among Two Arrested After Attempt to Access UK Nuclear Submarine Base
Deregulation, Artificial Intelligence, and Fraud Laws Reshape UK Financial Services Landscape
UK Considers Lower Speed Limits to Reduce Fuel Use Amid Escalating Energy Crisis
UK Borrowing Costs Surge to Post-Crisis High as Markets React to Inflation and War Risks
UK Government Prepares Emergency Economic Measures as Iran Conflict Fuels Financial Risks
Meningitis B Outbreak in the UK Raises Urgent Health Warnings as Cases Surge
Iran Issues Stark Warning to Britain Over US Base Access Amid Expanding Conflict
United Kingdom Authorizes US Strikes from British Bases as Iran Threatens Key Shipping Routes
Reform UK Suspends Scottish Candidate Following Financial Misconduct Allegations
Apple issues an unusual warning: this is how your iPhone can be hacked without you doing anything
UK and Nigeria Reach Agreement to Accelerate Return of Irregular Migrants
UK Sets New Aid Priorities Following Significant Budget Reductions
Cyprus President Urges Open Dialogue Over Future of British Sovereign Base Areas
Cyprus President Urges Open Dialogue Over Future of British Sovereign Base Areas
UK Plans 50% Steel Tariffs in Bold Move to Protect Domestic Industry
Iran Conflict Sends Shockwaves Through UK Economy as Energy Costs and Trade Risks Surge
UK Health Officials Warn Kent Meningitis Outbreak Still Active as Cases Continue to Rise
UK Climate Progress Faces Scrutiny Over Reliance on Carbon Accounting Methods
UK Deploys Advisers to United States to Shape Plan for Reopening Strait of Hormuz
Amazon Bets on AI-Driven Alexa Upgrade to Revive UK Smart Speaker Market
UK Abortion Law Changes Spark Strong Response from Church Leaders and Pro-Life Advocates
UK Abortion Law Changes Spark Strong Response from Church Leaders and Pro-Life Advocates
GB News Faces Regulatory Complaints Over On-Air Remarks on ‘Genocide’ Claims
UK Signals Expanded Support for Gulf Allies as Iranian Attacks Intensify Regional Threats
UK VAT Decision Opens Path for Potential Refunds to U.S. Biopharma Firms
UK and Canada Advance ‘Middle Power’ Strategy to Shape Global Influence Beyond Superpowers
Google Explores AI Opt-Out Features in Search to Address UK Regulatory Concerns
Google Explores AI Opt-Out Features in Search to Address UK Regulatory Concerns
UK Fuel Prices Poised to Surge as Global Tensions Drive Oil Market Volatility
UK Fuel Prices Poised to Surge as Global Tensions Drive Oil Market Volatility
UK Holds Back on Hormuz Escort Mission While Continuing Talks with Allies
TrumpRx Pricing Platform Faces Scrutiny as Some Medicines Remain Costlier Than in the UK
UK, Netherlands and Finland Explore Joint Defence Investment Bank to Boost Military Capability
Deadly Meningitis Outbreak in Kent Raises Alarm as Cases Surge and Emergency Response Expands
UK Security Adviser Viewed US-Iran Nuclear Deal as Within Reach Before Sudden Escalation
×