London Daily

Focus on the big picture.
Tuesday, Sep 15, 2026

Seven Russians sanctioned over ransomware cyber-crime

Seven Russians sanctioned over ransomware cyber-crime

Seven Russian men have been sanctioned by the UK and US for having links to recent ransomware attacks.

The UK's Foreign Office, along with US authorities, has released pictures of the men, frozen their assets and imposed travel restrictions.

US authorities have accused them of being members of loosely defined Russian-based hacking network Trickbot.

Ransomware strains Conti and Ryuk extorted at least £27m in ransoms from 149 British victims.

"This is a hugely significant moment for the UK and our collaborative efforts with the US to disrupt international cyber-criminals," said National Crime Agency director general Graeme Biggar.

"The sanctions are the first of their kind for the UK and signal the continuing campaign targeting those responsible for some of the most sophisticated and damaging ransomware that has impacted the UK and our allies," he said.

Mikhail Iskritskiy also known as (aka) Tropa and Valery Sedletski aka Strix are on the new cyber sanctions list

The National Cyber Security Centre, a part of GCHQ, has assessed that key group members are "highly likely" to have strong links to the Russian Intelligence Services from which they are sometimes directed.

No evidence was supplied to support this allegation.

The UK government categorises ransomware as a tier one national security threat with recent victims including UK schools, local authorities and firms.

The individuals sanctioned are: Vitaliy Kovalev, Valery Sedletski, Valentin Karyagin, Maksim Mikhailov, Dmitry Pleshevskiy, Mikhail Iskritskiy and Ivan Vakhromeyev.

Any arrests are impossible unless the accused leave the country.

The group behind the Conti strain has targeted hospitals, schools, businesses and local authorities, including the Scottish Environment Protection Agency.  It extorted $180m (£148m) in ransomware in 2021 alone, according to research from Chainalysis.

Ireland's Health Service Executive was targeted by Conti ransomware actors during the Covid pandemic, leading to disruption to blood tests, X-rays, CT scans, radiotherapy and chemotherapy appointments over 10 days. 

Another recent ransomware attack included Harrogate-based transportation and cold storage firm Reed Boardall, whose IT systems were under attack for nearly a week in 2021.

Although Conti disbanded in 2022, its members are thought to have continued their attacks under different guises.

Russia has for years denied that it is harbouring ransomware hackers, but cyber-security experts say there is compelling evidence that many of the criminal groups are co-ordinated from the country.

Many of the gangs operate on Russian-language forums, there are fewer attacks on Russian organisations, and the frequency of hacks dips during Russian public holidays.

The latest sanctions follow multinational efforts to disrupt ransomware crews, most recently by sabotaging the Hive ransomware crew and taking them offline.

Previously the US and UK worked together on sanctions issued against alleged members of cyber-crime group Evil Corp in 2020. Authorities allege that some of the men in the latest sanctions could have formerly worked for the group.

In 2021 the BBC went to Russia to try to track down the group and was told by a family member that the sanctions had made them fear for their safety.


Businesses are being held to ransom by callous Ryuk cyber-criminals


Newsletter

Related Articles

0:00
0:00
Close
UK Advertising Industry Warns Wider Junk Food Rules Could Put £1 Billion in Media Spending at Risk
Cornwall Opens Devolution Talks With UK Government Over Transport and Local Services
UK Parliament Considers Sovereign Grant Reform Setting Royal Funding at £99.9 Million
Trades Union Congress Calls for Income-Based Energy Tariff Funded by Higher Bank Levy
UK Prime Minister Rejects Second Scottish Independence Referendum
House of Lords Begins Scrutiny of Bill to Lower UK Voting Age to 16
Anthropic Says Claude Was Exploited in Weapons-Related and State-Linked Cyber Activity
Institute of Directors Urges UK Government to Avoid Business Tax Increases in Autumn Budget
Rising Gilt Yields Cut UK Fiscal Headroom to About £13 Billion Ahead of Budget
UK Economy Grows 0.4% in July as Services and Technology Activity Strengthen
UK Government Promises Clearer Student Loan Guidance After Repayment Backlash
Charities Warn Unpaid Carers May Die Before Receiving Government Compensation
Dover Unrest Prompts Review of UK Counter-Extremism Strategy
Celtic Summit Leaders Reassert Right to Pursue Independence From UK
NHS Records Busiest Summer on Record Amid Severe Heatwaves
Harrods Faces Potential £150 Million Compensation Bill Over Al Fayed Abuse Claims
UK Parliament Opens Debate on Landmark Assisted Dying Legislation
Metropolitan Police Investigate Reform UK Over Alleged Foreign Electoral Donations
UK Economy Expands 0.4% in July as AI Investment Boosts Activity
Bank of England Signals Caution on Rates as Inflation Pressures Persist
Tesco Alerts Police After Scammers Use Its Branding in AI-Generated Fraud
Lindy Cameron Appointed First Female Permanent Under-Secretary at UK Foreign Office
UK Government to Rewrite Student Loan Guidance After Mis-Selling Criticism
Welsh First Minister Warns Andy Burnham Government to Respect Devolution
Trump’s Falkland Islands Remarks Trigger New Diplomatic Tension With Britain
Reform UK Receives Record £72 Million Donation From Cryptocurrency Billionaires
UK Bans Imports From Israeli West Bank Settlements and Sanctions Supporting Institutions
Bayeux Tapestry Draws Large Crowds at British Museum
Cuts to International Aid Raise Concerns Over Fragile Overseas Health Systems
UK Airlines and Logistics Operators Adjust Capacity as Fuel Costs Rise
UK Mortgage Arrears Edge Lower in Second Quarter
UK Government Advances New Devolution Offers for English Councils
UK Parliament Begins Debate on NHS Governance and Single Patient Record Reforms
Andy Burnham Launches Number 10 North Devolution Initiative
UK Parliament Rejects Assisted Dying Bill for Terminally Ill Adults
UK Bans Goods From Israeli Settlements in the Occupied West Bank
UK Economy Grows 0.4% in July as Technology Services Strengthen
Metropolitan Police Continue Investigation Into Reform UK Political Financing
Chinese Crypto Entrepreneur Leon Li Identified as Seller of £190 Million London Mansion
Trades Union Congress Proposes Social Energy Tariff Funded by Higher Bank Surcharge
British Chambers of Commerce Calls for State Pension Triple Lock to Be Scrapped
Anthropic Says Claude Helped Disrupt Biological Weapons and Cyber Espionage Threats
UK Imposes Sanctions Over Israeli Settlements and West Bank Violence
UK Reimposes Sectoral Sanctions on Iran’s Aviation, Shipping and Energy Networks
UK Economy Grows 0.4% in July as AI and Programming Services Lift Activity
UK House of Commons Rejects Assisted Dying Bill by 286 Votes to 270
UK Reviews Nationwide Emergency Alert Tests After Systems Meet Reliability Targets
UK Seeks Faster Rail Links Across Northern Industrial Corridors
British Business Bank Allocates £150 Million for High-Growth Companies in Northern England
BBC Warns Staff Strikes Are Possible Amid Pay Dispute and £500 Million Savings Drive
×