Summary
The U.K. National Crime Agency (NCA) has identified Aleksandr Ryzhenkov, a high-ranking member of the notorious Evil Corp cybercrime syndicate, as an affiliate of the LockBit ransomware group. Ryzhenkov, believed to be second in command at Evil Corp, has been linked to various ransomware attacks and has been sanctioned by U.S., U.K., and Australian authorities for his criminal activities.
This revelation is part of a broader international law enforcement initiative known as Operation Cronos, aimed at disrupting the operations of both LockBit and Evil Corp. Ryzhenkov’s connections to Evil Corp’s leadership, particularly founder Maksim Yakubets, highlight the intricate relationships within Russian cybercrime networks. The NCA’s findings indicate that while Evil Corp typically executes state-sponsored cyberattacks, Ryzhenkov’s involvement with LockBit has expanded his criminal endeavors, targeting numerous victims since he became affiliated with the group in 2022. Recent actions have included arrests and further sanctions against key figures within Evil Corp, reflecting ongoing efforts to combat ransomware operations linked to Russian cybercriminals.
Evil Corp hit with new sanctions, BitPaymer ransomware charges
Oct. 1 / Bleepingcomputer / Highlights the extensive sanctions against Evil Corp and the indictment of Ryzhenkov, providing a thorough background on the group's operations and their ties to Russian state-sponsored cybercrime. “ The Evil Corp cybercrime syndicate has been hit with new sanctions by the United States, United Kingdom, and Australia. The US also indicted one of its...
Oct. 1 / Tech Crunch / Offers unique insights into the relationship between Evil Corp and the Kremlin, detailing the ongoing efforts of Operation Cronos while emphasizing the significance of Ryzhenkov's role in the broader cybercrime landscape. “ The U.K.’s National Crime Agency has linked a long-standing affiliate of the LockBit ransomware group to the notorious Russia-backed Evil Corp, a cybercrime...