WorldECR | International sanctions target Russia’s Evil Corp group

In coordinated action, the United States, Britain and Australia have jointly imposed sanctions on members of the Russia-based ‘cybercriminal organization’ Evil Corp, which is reportedly linked to the equally infamous LockBit ransomware group that is also reportedly operating from Russia .

The U.S. Treasury Department’s Office of Foreign Assets Control (“OFAC”) has announced the designation of seven individuals and two entities associated with Evil Corp, as part of a broader strategy to combat cyber threats emanating from Russia.

Additionally, the US Department of Justice has filed charges against a member of the Evil Corp in connection with his use of the BitPaymer ransomware to attack victims in the United States.

At the same time, the United Kingdom imposed sanctions on 16 members of Evil Corp, underscoring the group’s extensive involvement in cybercrime. Among those sanctioned is Maksim Yakubets, who, according to Britain, “long directed the group’s activities and has a $5 million bounty on his head from the US Department of Justice.” Yakubets also maintained strong ties between Evil Corp and the Russian state, developing relationships with the security and intelligence services, it alleged.

On December 5, 2019, OFAC designated Yakubets and Evil Corp, along with more than a dozen of its members, facilitators and affiliates.

Together with its partners, Australia has also announced the inclusion of three individuals under the Autonomous Sanctions Regulations 2011, imposing targeted financial sanctions and travel bans on them for their involvement in cybercrime, including Yakubets.

“Today’s trilateral action underscores our collective commitment to protect against cybercriminals, such as ransomware actors, who seek to undermine our critical infrastructure and threaten our citizens,” said US Acting Assistant Secretary of the Treasury Bradley Smith.

https://home.treasury.gov/news/press-releases/jy2623

https://www.justice.gov/opa/pr/russian-national-indicted-series-ransomware-attacks

https://www.gov.uk/government/news/uk-sanctions-members-of-notorious-evil-corp-cyber-crime-gang-after-lammy-calls-out-putins-mafia-state

https://www.dfat.gov.au/news/news/three-persons-listed-under-autonomous-sanctions-regulations-2011-cyber