London Daily

Focus on the big picture.
Thursday, Dec 18, 2025

Seven Russians sanctioned over ransomware cyber-crime

Seven Russians sanctioned over ransomware cyber-crime

Seven Russian men have been sanctioned by the UK and US for having links to recent ransomware attacks.

The UK's Foreign Office, along with US authorities, has released pictures of the men, frozen their assets and imposed travel restrictions.

US authorities have accused them of being members of loosely defined Russian-based hacking network Trickbot.

Ransomware strains Conti and Ryuk extorted at least £27m in ransoms from 149 British victims.

"This is a hugely significant moment for the UK and our collaborative efforts with the US to disrupt international cyber-criminals," said National Crime Agency director general Graeme Biggar.

"The sanctions are the first of their kind for the UK and signal the continuing campaign targeting those responsible for some of the most sophisticated and damaging ransomware that has impacted the UK and our allies," he said.

Mikhail Iskritskiy also known as (aka) Tropa and Valery Sedletski aka Strix are on the new cyber sanctions list

The National Cyber Security Centre, a part of GCHQ, has assessed that key group members are "highly likely" to have strong links to the Russian Intelligence Services from which they are sometimes directed.

No evidence was supplied to support this allegation.

The UK government categorises ransomware as a tier one national security threat with recent victims including UK schools, local authorities and firms.

The individuals sanctioned are: Vitaliy Kovalev, Valery Sedletski, Valentin Karyagin, Maksim Mikhailov, Dmitry Pleshevskiy, Mikhail Iskritskiy and Ivan Vakhromeyev.

Any arrests are impossible unless the accused leave the country.

The group behind the Conti strain has targeted hospitals, schools, businesses and local authorities, including the Scottish Environment Protection Agency.  It extorted $180m (£148m) in ransomware in 2021 alone, according to research from Chainalysis.

Ireland's Health Service Executive was targeted by Conti ransomware actors during the Covid pandemic, leading to disruption to blood tests, X-rays, CT scans, radiotherapy and chemotherapy appointments over 10 days. 

Another recent ransomware attack included Harrogate-based transportation and cold storage firm Reed Boardall, whose IT systems were under attack for nearly a week in 2021.

Although Conti disbanded in 2022, its members are thought to have continued their attacks under different guises.

Russia has for years denied that it is harbouring ransomware hackers, but cyber-security experts say there is compelling evidence that many of the criminal groups are co-ordinated from the country.

Many of the gangs operate on Russian-language forums, there are fewer attacks on Russian organisations, and the frequency of hacks dips during Russian public holidays.

The latest sanctions follow multinational efforts to disrupt ransomware crews, most recently by sabotaging the Hive ransomware crew and taking them offline.

Previously the US and UK worked together on sanctions issued against alleged members of cyber-crime group Evil Corp in 2020. Authorities allege that some of the men in the latest sanctions could have formerly worked for the group.

In 2021 the BBC went to Russia to try to track down the group and was told by a family member that the sanctions had made them fear for their safety.


Businesses are being held to ransom by callous Ryuk cyber-criminals


Newsletter

Related Articles

0:00
0:00
Close
UK Issues Final Ultimatum to Roman Abramovich Over £2.5bn Chelsea Sale Funds for Ukraine
Rare Pink Fog Sweeps Across Parts of the UK as Met Office Warns of Poor Visibility
UK Police Pledge ‘More Assertive’ Enforcement to Tackle Antisemitism at Protests
UK Police Warn They Will Arrest Protesters Chanting ‘Globalise the Intifada’
Trump Files $10 Billion Defamation Lawsuit Against BBC as Broadcaster Pledges Legal Defence
UK Says U.S. Tech Deal Talks Still Active Despite Washington’s Suspension of Prosperity Pact
UK Mortgage Rules to Give Greater Flexibility to Borrowers With Irregular Incomes
UK Treasury Moves to Position Britain as Leading Global Hub for Crypto Firms
U.S. Freezes £31 Billion Tech Prosperity Deal With Britain Amid Trade Dispute
Prince Harry and Meghan’s Potential UK Return Gains New Momentum Amid Security Review and Royal Dialogue
Zelensky Opens High-Stakes Peace Talks in Berlin with Trump Envoy and European Leaders
Historical Reflections on Press Freedom Emerge Amid Debate Over Trump’s Media Policies
UK Boosts Protection for Jewish Communities After Sydney Hanukkah Attack
UK Government Declines to Comment After ICC Prosecutor Alleges Britain Threatened to Defund Court Over Israel Arrest Warrant
Apple Shutters All Retail Stores in the United Kingdom Under New National COVID-19 Lockdown
US–UK Technology Partnership Strains as Key Trade Disagreements Emerge
UK Police Confirm No Further Action Over Allegation That Andrew Asked Bodyguard to Investigate Virginia Giuffre
Giuffre Family Expresses Deep Disappointment as UK Police Decline New Inquiry Into Andrew Mountbatten-Windsor Claims
Transatlantic Trade Ambitions Hit a Snag as UK–US Deal Faces Emerging Challenges
Ex-ICC Prosecutor Alleges UK Threatened to Withdraw Funding Over Netanyahu Arrest Warrant Bid
UK Disciplinary Tribunal Clears Carter-Ruck Lawyer of Misconduct in OneCoin Case
‘Pink Ladies’ Emerge as Prominent Face of UK Anti-Immigration Protests
Nigel Farage Says Reform UK Has Become Britain’s Largest Party as Labour Membership Falls Sharply
Google DeepMind and UK Government Launch First Automated AI Lab to Accelerate Scientific Discovery
UK Economy Falters Ahead of Budget as Growth Contracts and Confidence Wanes
Australia Approves Increased Foreign Stake in Strategic Defence Shipbuilder
Former UK Prime Minister Boris Johnson proclaims, “For Ukraine, surrendering their land would be a nightmare.”
Microsoft Challenges £2.1 Billion UK Cloud Licensing Lawsuit at Competition Tribunal
Fake Doctor in Uttar Pradesh Accused of Killing Woman After Performing YouTube-Based Surgery
Hackers Are Hiding Malware in Open-Source Tools and IDE Extensions
Traveling to USA? Homeland Security moving toward requiring foreign travelers to share social media history
UK Officials Push Back at Trump Saying European Leaders ‘Talk Too Much’ About Ukraine
UK Warns of Escalating Cyber Assault Linked to Putin’s State-Backed Operations
UK Consumer Spending Falters in November as Households Hold Back Ahead of Budget
UK Orders Fresh Review of Prince Harry’s Security Status After Formal Request
U.S. Authorises Nvidia to Sell H200 AI Chips to China Under Security Controls
Trump in Direct Assault: European Leaders Are Weak, Immigration a Disaster. Russia Is Strong and Big — and Will Win
"App recommendation" or disguised advertisement? ChatGPT Premium users are furious
"The Great Filtering": Australia Blocks Hundreds of Thousands of Minors From Social Networks
Mark Zuckerberg Pulls Back From Metaverse After $70 Billion Loss as Meta Shifts Priorities to AI
Nvidia CEO Says U.S. Data-Center Builds Take Years while China ‘Builds a Hospital in a Weekend’
Indian Airports in Turmoil as IndiGo Cancels Over a Thousand Flights, Stranding Thousands
Hollywood Industry on Edge as Netflix Secures Near-$60 Bln Loan for Warner Bros Takeover
Drugs and Assassinations: The Connection Between the Italian Mafia and Football Ultras
Hollywood megadeal: Netflix acquires Warner Bros. Discovery for 83 billion dollars
The Disregard for a Europe ‘in Danger of Erasure,’ the Shift Toward Russia: Trump’s Strategic Policy Document
Two and a Half Weeks After the Major Outage: A Cloudflare Malfunction Brings Down Multiple Sites
UK data-regulator demands urgent clarity on racial bias in police facial-recognition systems
Labour Uses Biscuits to Explain UK Debt — MPs Lean Into Social Media to Reach New Audiences
German President Lays Wreath at Coventry as UK-Germany Reaffirm Unity Against Russia’s Threat
×