The British National Crime Agency (NCA) did this sanctioned 16 people belong to the cybercriminal organization Evil Corp., which has ties to the Lockbit ransomware group and the Russian state.
Evil Corp. originated as a Moscow-based family financial crime group before entering the world of cybercrime and successfully stealing at least $300 million from healthcare, critical national infrastructure, government and other organizations around the world.
The group is also believed to have orchestrated espionage operations against NATO members on behalf of Russian intelligence services. Members of the group have also been sanctioned by authorities in the US and Australia.
Evil Corp, FSB and LockBit
In 2019, an NCA investigation culminated in the US imposing sanctions on the head of the Evil Corp., Maksim Yakubets, and an administrator of the organization, Igor Turashev, along with several other members. However, today’s additional sanctions from the UK Foreign, Commonwealth and Development Office now include both Yukabets and Turashev, in addition to seven other individuals.
Among them is Aleksandr Ryzhenkov, an ally of Yakubets and LockBit, with links to numerous ransomware attacks identified during Operation Cronos. Ryzhenkov was also identified as the perpetrator of a number of BitPaymer ransomware attacks on US organizations, and received an unsealed indictment from the US Department of Justice.
Among those with strong ties to the Russian state are Yakubets’ father, Viktor Yakubets, and former FSB official and father-in-law, Eduard Benderskiy. James Babbage, director general for threats at the NCA, said of the sanctions: “The action announced today has taken place in conjunction with extensive and complex investigations by the NCA into two of the most damaging cybercrime groups of all time.”
“These sanctions expose even more members of Evil Corp, including someone affiliated with LockBit, and those who were key to enabling their activities,” Babbage continued.
“Since we supported the US action against Evil Corp in 2019, members have adjusted their tactics and the damage attributed to the group has been significantly reduced. We expect these new designations will also disrupt their ongoing criminal activities.
“Ransomware is the biggest cybercrime threat facing Britain and the rest of the world. The NCA is committed to working with our partners in the UK and beyond, sharing intelligence and disrupting the most sophisticated and malicious ransomware groups wherever they are. how long it takes,” Babbage concluded.