US imposes new sanctions on Russia’s Evil Corp cyber group

The U.S. Treasury has imposed new sanctions on members of the Russia-based cybercriminal group Evil Corp, in coordination with the UK and Australia. 

These sanctions target seven individuals and two entities associated with the group, known for deploying Dridex malware and Bitpaymer ransomware. 

Evil Corp has caused over $100 million in global losses by stealing login credentials from financial institutions and demanding cryptocurrency payments in ransomware attacks. 

The group’s leader, Maksim Yakubets, and other members maintain close ties to high-level Russian officials, including Maksim's father-in-law, Eduard Benderskiy, who has used his influence within Russian security services to shield the group from prosecution. 

Additionally, another key figure, Aleksandr Ryzhenkov, has been involved in deploying ransomware against U.S. targets. 

This move comes as part of a broader international effort to counter cyber threats, highlighted by the U.S.-hosted Counter Ransomware Initiative summit, which involves over 50 countries. 

The sanctions block any U.S. assets held by the individuals and entities involved, and institutions that engage with these sanctioned individuals risk severe penalties. 

The expanded sanctions underscore the U.S. government’s commitment to dismantling Evil Corp’s operations, particularly its use of cryptocurrency in facilitating financial crimes. 

The Treasury Department has continued to build upon sanctions initially imposed in 2019, reinforcing global collaboration to combat the ongoing ransomware threat.