London Daily

Focus on the big picture.
Wednesday, Nov 26, 2025

Seven Russians sanctioned over ransomware cyber-crime

Seven Russians sanctioned over ransomware cyber-crime

Seven Russian men have been sanctioned by the UK and US for having links to recent ransomware attacks.

The UK's Foreign Office, along with US authorities, has released pictures of the men, frozen their assets and imposed travel restrictions.

US authorities have accused them of being members of loosely defined Russian-based hacking network Trickbot.

Ransomware strains Conti and Ryuk extorted at least £27m in ransoms from 149 British victims.

"This is a hugely significant moment for the UK and our collaborative efforts with the US to disrupt international cyber-criminals," said National Crime Agency director general Graeme Biggar.

"The sanctions are the first of their kind for the UK and signal the continuing campaign targeting those responsible for some of the most sophisticated and damaging ransomware that has impacted the UK and our allies," he said.

Mikhail Iskritskiy also known as (aka) Tropa and Valery Sedletski aka Strix are on the new cyber sanctions list

The National Cyber Security Centre, a part of GCHQ, has assessed that key group members are "highly likely" to have strong links to the Russian Intelligence Services from which they are sometimes directed.

No evidence was supplied to support this allegation.

The UK government categorises ransomware as a tier one national security threat with recent victims including UK schools, local authorities and firms.

The individuals sanctioned are: Vitaliy Kovalev, Valery Sedletski, Valentin Karyagin, Maksim Mikhailov, Dmitry Pleshevskiy, Mikhail Iskritskiy and Ivan Vakhromeyev.

Any arrests are impossible unless the accused leave the country.

The group behind the Conti strain has targeted hospitals, schools, businesses and local authorities, including the Scottish Environment Protection Agency.  It extorted $180m (£148m) in ransomware in 2021 alone, according to research from Chainalysis.

Ireland's Health Service Executive was targeted by Conti ransomware actors during the Covid pandemic, leading to disruption to blood tests, X-rays, CT scans, radiotherapy and chemotherapy appointments over 10 days. 

Another recent ransomware attack included Harrogate-based transportation and cold storage firm Reed Boardall, whose IT systems were under attack for nearly a week in 2021.

Although Conti disbanded in 2022, its members are thought to have continued their attacks under different guises.

Russia has for years denied that it is harbouring ransomware hackers, but cyber-security experts say there is compelling evidence that many of the criminal groups are co-ordinated from the country.

Many of the gangs operate on Russian-language forums, there are fewer attacks on Russian organisations, and the frequency of hacks dips during Russian public holidays.

The latest sanctions follow multinational efforts to disrupt ransomware crews, most recently by sabotaging the Hive ransomware crew and taking them offline.

Previously the US and UK worked together on sanctions issued against alleged members of cyber-crime group Evil Corp in 2020. Authorities allege that some of the men in the latest sanctions could have formerly worked for the group.

In 2021 the BBC went to Russia to try to track down the group and was told by a family member that the sanctions had made them fear for their safety.


Businesses are being held to ransom by callous Ryuk cyber-criminals


Newsletter

Related Articles

0:00
0:00
Close
UK Economy Stalls as Reeves Faces First Budget Test
UK Economy’s Weak Start Adds Pressure on Prime Minister Starmer
UK Government Acknowledges Billionaire Exodus Amid Tax Rise Concerns
UK Budget 2025: Markets Brace as Chancellor Faces Fiscal Tightrope
UK Unveils Strategic Plan to Secure Critical Mineral Supply Chains
UK Taskforce Calls for Radical Reset of Nuclear Regulation to Cut Costs and Accelerate Build
UK Government Launches Consultation on Major Overhaul of Settlement Rules
Google Struggles to Meet AI Demand as Infrastructure, Energy and Supply-Chain Gaps Deepen
Car Parts Leader Warns Europe Faces Heavy Job Losses in ‘Darwinian’ Auto Shake-Out
Arsenal Move Six Points Clear After Eze’s Historic Hat-Trick in Derby Rout
Wealthy New Yorkers Weigh Second Homes as the ‘Mamdani Effect’ Ripples Through Luxury Markets
Families Accuse OpenAI of Enabling ‘AI-Driven Delusions’ After Multiple Suicides
UK Unveils Critical-Minerals Strategy to Break China Supply-Chain Grip
Taylor Swift’s “The Fate of Ophelia” Extends U.K. No. 1 Run to Five Weeks
UK VPN Sign-Ups Surge by Over 1,400 % as Age-Verification Law Takes Effect
Former MEP Nathan Gill Jailed for Over Ten Years After Taking Pro-Russia Bribes
Majority of UK Entrepreneurs Regard Government as ‘Anti-Business’, Survey Shows
UK’s Starmer and US President Trump Align as Geneva Talks Probe Ukraine Peace Plan
UK Prime Minister Signals Former Prince Andrew Should Testify to US Epstein Inquiry
Royal Navy Deploys HMS Severn to Shadow Russian Corvette and Tanker Off UK Coast
China’s Wedding Boom: Nightclubs, Mountains and a Demographic Reset
Fugees Founding Member Pras Michel Sentenced to 14 Years in High-Profile US Foreign Influence Case
WhatsApp’s Unexpected Rise Reshapes American Messaging Habits
United States: Judge Dressed Up as Elvis During Hearings – and Was Forced to Resign
Johnson Blasts ‘Incoherent’ Covid Inquiry Findings Amid Report’s Harsh Critique of His Government
Lord Rothermere Secures £500 Million Deal to Acquire Telegraph Titles
Maduro Tightens Security Measures as U.S. Strike Threat Intensifies
U.S. Envoys Deliver Ultimatum to Ukraine: Sign Peace Deal by Thursday or Risk Losing American Support
Zelenskyy Signals Progress Toward Ending the War: ‘One of the Hardest Moments in History’ (end of his business model?)
U.S. Issues Alert Declaring Venezuelan Airspace a Hazard Due to Escalating Security Conditions
The U.S. State Department Announces That Mass Migration Constitutes an Existential Threat to Western Civilization and Undermines the Stability of Key American Allies
Students Challenge AI-Driven Teaching at University of Staffordshire
Pikeville Medical Center Partners with UK’s Golisano Children’s Network to Expand Pediatric Care
Germany, France and UK Confirm Full Support for Ukraine in US-Backed Security Plan
UK Low-Traffic Neighbourhoods Face Rising Backlash as Pandemic Schemes Unravel
UK Records Coldest Night of Autumn as Sub-Zero Conditions Sweep the Country
UK at Risk of Losing International Doctors as Workforce Exodus Grows, Regulator Warns
ASU Launches ASU London, Extending Its Innovation Brand to the UK Education Market
UK Prime Minister Keir Starmer to Visit China in January as Diplomatic Reset Accelerates
Google Launches Voluntary Buyouts for UK Staff Amid AI-Driven Company Realignment
UK braces for freezing snap as snow and ice warnings escalate
Majority of UK Novelists Fear AI Could Displace Their Work, Cambridge Study Finds
UK's Carrier Strike Group Achieves Full Operational Capability During NATO Drill in Mediterranean
Trump and Mamdani to Meet at the White House: “The Communist Asked”
Nvidia Again Beats Forecasts, Shares Jump in After-Hours Trading
Wintry Conditions Persist Along UK Coasts After Up to Seven Centimetres of Snow
UK Inflation Eases to 3.6 % in October, Opening Door for Rate Cut
UK Accelerates Munitions Factory Build-Out to Reinforce Warfighting Readiness
UK Consumer Optimism Plunges Ahead of November Budget
A Decade of Innovation Stagnation at Apple: The Cook Era Critique
×