Stay up to date with notifications from The Independent

Notifications can be managed in browser preferences.

UK sanctions members of Russian cybercrime gang that targeted hospitals

The group is accused of infecting millions of computers worldwide with malware.

Sophie Wingate
Thursday 07 September 2023 10:21 EDT
The UK and US have sanctioned 11 members of Russian cybercrime gang (Dominic Lipinski/PA)
The UK and US have sanctioned 11 members of Russian cybercrime gang (Dominic Lipinski/PA) (PA Archive)

Your support helps us to tell the story

From reproductive rights to climate change to Big Tech, The Independent is on the ground when the story is developing. Whether it's investigating the financials of Elon Musk's pro-Trump PAC or producing our latest documentary, 'The A Word', which shines a light on the American women fighting for reproductive rights, we know how important it is to parse out the facts from the messaging.

At such a critical moment in US history, we need reporters on the ground. Your donation allows us to keep sending journalists to speak to both sides of the story.

The Independent is trusted by Americans across the entire political spectrum. And unlike many other quality news outlets, we choose not to lock Americans out of our reporting and analysis with paywalls. We believe quality journalism should be available to everyone, paid for by those who can afford it.

Your support makes all the difference.

UK sanctions have been announced against 11 members of a Russian cybercrime gang behind the hacking of hospitals during the coronavirus pandemic.

Britain and the United States acted together to slap the Russian nationals with asset freezes and travel bans, the Foreign, Commonwealth and Development Office (FCDO) said on Thursday.

The so-called TrickBot Group is accused of infecting millions of computers worldwide with malware that targeted hospitals, schools, local authorities and businesses.

Our sanctions show they cannot act with impunity

Foreign Secretary James Cleverly

At least £27 million was extorted from UK victims by the group, and 180 million US dollars (£144 million) globally, according to the National Crime Agency.

Foreign Secretary James Cleverly said that by revealing the identities of those sanctioned, who hid behind online pseudonyms, further ransomware attacks will be disrupted.

They include senior administrator Andrey Zhuykov, and Maksim Khaliullin and Mikhail Tsarev, who recruited new members.

The gang also threatened those who opposed Russia’s invasion of Ukraine, the FCDO said.

Mr Cleverly said: “These cybercriminals thrive off anonymity, moving in the shadows of the internet to cause maximum damage and extort money from their victims.

“Our sanctions show they cannot act with impunity. We know who they are and what they are doing.

“By exposing their identities, we are disrupting their business models and making it harder for them to target our people, our businesses and our institutions.”

The UK and US previously imposed sanctions against seven leading members of TrickBot in February.

Thank you for registering

Please refresh the page or navigate to another page on the site to be automatically logged inPlease refresh your browser to be logged in