UK Sanctions 16 Evil Corp Hackers Protected by FSB After $300 Million Theft

Oct 1, 2024, 02:09 PM

The UK's National Crime Agency (NCA) has unmasked members of the Russian cybercrime group Evil Corp, linking them to the LockBit ransomware group. The NCA seized the LockBit darknet site and brought it back online to release additional updates. The agency identified Russian national Aleksandr Ryzhenkov, known as “Beverly,” as a high-ranking member of Evil Corp and a LockBit affiliate, believed to be the 'second in command' at Evil Corp. Evil Corp is protected by Russia's Federal Security Service (FSB) and maintains a 'privileged' relationship with the Kremlin, often conducting cyberattacks and espionage operations against NATO allies on behalf of Russian intelligence services. The NCA also named and sanctioned Eduard Benderskiy, a former FSB official described as a key enabler and protector for Evil Corp. The UK has sanctioned 16 members of the group, imposing asset freezes and travel bans. Evil Corp is believed to have stolen $300 million from victims globally. The U.S. Treasury and State Department have also issued cyber-related sanctions against individuals associated with Evil Corp, coordinating with the UK and Australia to disrupt the group’s operations and protect national security.