U.S., U.K. Sanction 7 Men Tied to Trickbot Hacking Group
Summary: The U.S. Treasury and U.K. authorities sanctioned seven men accused of operating Trickbot, a Russia-based cybercrime-as-a-service platform active since 2016 that Treasury says is associated with Russian intelligence services. Treasury said the group targeted hospitals during the 2020 pandemic, including ransomware against three Minnesota medical facilities that disrupted networks and telephones and caused a diversion of ambulances, and named 34-year-old Russian national Vitaly "Bentley" Kovalev as the alleged senior leader, indicted in New Jersey in 2012 over a money mule scheme.
What's compelling: Chainalysis estimates Conti extorted more than $100 million in 2021 alone and Ryuk more than $150 million, and CrowdStrike's Adam Meyers said sanctioned groups often go dark and rebrand under a new name - so the disruption may be temporary while the criminal infrastructure persists.
Read the original at Krebs on Security ↗
- Topics
- Malware
- Related
- ARTEX and beyond: AI-enabled penetration testing platforms Cyber Risks · Nov 13, 2026Fake GTA 6 download goes after Steam logins and crypto wallet data Cyber Risks · Nov 13, 2026Operation Endgame Takes Down Gootloader, CastleRAT and StealC Servers, Seizes 6.4M Stolen Logins Cyber Risks · Nov 13, 2026