UK and US impose sanctions on 11 Russians linked to notorious Trickbot group

The United States and the United Kingdom have imposed sanctions on eleven Russian individuals allegedly involved in the Trickbot malware and Conti ransomware groups.
Flag

Authorities in the United States and the United Kingdom have imposed sanctions on eleven Russian individuals allegedly involved in the operations of the Trickbot malware and Conti ransomware groups. According to the US Treasury, these sanctions specifically target key figures responsible for managing and procuring resources for the Trickbot group, which is believed to have connections with Russian intelligence services. The Trickbot group is infamous for its involvement in a banking trojan and botnet that has reportedly stolen over $180 million worldwide.

This action follows a previous round of sanctions in February, which targeted a single criminal network linked to both the Conti and Ryuk ransomware gangs, as well as those associated with the Trickbot banking trojan.

Alongside the sanctions, the US Department of Justice unsealed indictments against seven individuals involved. Brian Nelson, the under secretary of the treasury for terrorism and financial intelligence, emphasized the determination of the United States to combat ransomware and protect critical infrastructure, pledging to collaborate closely with British partners in this endeavor.

U.K. Foreign Secretary James Cleverly highlighted the cyber criminals’ reliance on anonymity and capacity to cause significant harm and extort money from victims. He emphasized that these sanctions expose their identities, disrupting their operations and making it more challenging for them to target individuals, businesses, and institutions.

The Trickbot group has been linked to extorting at least $180 million globally and over £27 million (more than $33 million) from 149 victims in the UK, including hospitals, schools, local authorities, and businesses. The National Crime Agency investigated these activities and noted that several of those subjected to sanctions held significant roles within the group, including high-level managers, administrators, and individuals responsible for recruiting new members, such as Maksim Khaliullin and Mikhail Tsarev.