UK and US Sanction 11 Russians Connected to Notorious Trickbot Group

UK and US Sanction 11 Russians Connected to Notorious Trickbot Group

This article was updated at 12:45 p.m. EST


Eleven Russian nationals alleged to have been part of the criminal group operating the Trickbot malware and Conti ransomware schemes were sanctioned Thursday by authorities in the United States and United Kingdom.


The individuals targeted by the sanctions “include key actors involved in management and procurement for the Trickbot group, which has ties to Russian intelligence services,” according to the U.S. Treasury. The infamous banking trojan and botnet is believed to have stolen more than $180 million worldwide.


It follows a first tranche of sanctions in February against what officials told Recorded Future News was a single criminal network behind the Conti and Ryuk ransomware gangs, as well as those who have been involved with the Trickbot banking trojan.


While announcing the sanctions Thursday morning, the U.S. Department of Justice unsealed indictments against seven of the individuals.


The 11 new additions, as described in the sanctions release, are:


  • Andrey Zhuykov was a central actor in the group and acted as a senior administrator. He is also known by the online monikers Dif and Defender.

  • Maksim Galochkin led a group of testers, with responsibilities for development, supervision, and implementation of tests. Galochkin is also known by the online monikers Bentley, Crypt, and Volhvb.

  • Maksim Rudenskiy was a key member of the Trickbot group and the team lead for coders.

  • Mikhail Tsarev was a manager with the group, overseeing human resources and finance. He was responsible for management and bookkeeping. He is also known by the monikers Mango, Alexander Grachev, Super Misha, Ivanov Mixail, Misha Krutysha, and Nikita Andreevich Tsarev.

  • D ..

    Support the originator by clicking the read the rest link below.