cybercrime 03 October 2024

International sanctions target Russian Evil Corp group

In coordinated action, the United States, United Kingdom and Australia have jointly imposed sanctions on members of the Russia-based Evil Corp ‘cybercriminal organisation,’ reported to be linked to the equally notorious LockBit ransomware group that is also said to operate from Russia.

The US Department of the Treasury’s Office of Foreign Assets Control (‘OFAC’) announced the designation of seven individuals and two entities associated with Evil Corp, as part of a broader strategy to combat cyber threats originating from Russia.

Additionally, the US Department of Justice unsealed an indictment charging one Evil Corp member in connection with his use of BitPaymer ransomware to target victims in the United States.

Simultaneously, the United Kingdom imposed sanctions on 16 members of Evil Corp, highlighting the group’s extensive involvement in cybercrime. Among those sanctioned is Maksim Yakubets, who the UK noted ‘long led the group’s operations and has a $5 million bounty on his head by the US Department of Justice.’ Yakubets also cultivated strong ties between Evil Corp and the Russian state, developing relationships with the security and intelligence services, it alleged.

On 5 December 2019, OFAC designated Yakubets and Evil Corp, together with over a dozen of its members, facilitators and affiliated companies.

Concurrent with its partners, Australia also announced the listing of three individuals under the Autonomous Sanctions Regulations 2011, subjecting them to targeted financial sanctions and travel bans for their involvement in  cybercrimes, including Yakubets.

‘Today’s trilateral action underscores our collective commitment to safeguard against cybercriminals like ransomware actors, who seek to undermine our critical infrastructure and threaten our citizens,’ said US Acting Under Secretary of the Treasury Bradley Smith.

https://home.treasury.gov/news/press-releases/jy2623

https://www.justice.gov/opa/pr/russian-national-indicted-series-ransomware-attacks

https://www.gov.uk/government/news/uk-sanctions-members-of-notorious-evil-corp-cyber-crime-gang-after-lammy-calls-out-putins-mafia-state

https://www.dfat.gov.au/news/news/three-persons-listed-under-autonomous-sanctions-regulations-2011-cyber