The United States and Great Britain have implemented sanctions against 11 individuals linked to the cybercriminal group Trickbot. The US Department of the Treasury reported that the group has targeted American government agencies, businesses, and medical organizations, with a significant increase in attacks during the COVID-19 pandemic.
Trickbot, known for developing a banking Trojan in 2016, which was used to steal financial information worldwide, has also been responsible for a series of attacks on US medical institutions in 2020, resulting in the compromise of their computer networks.
The damage caused by these hackers is estimated at $180 million, as evaluated by American and British intelligence agencies. The list of individuals subject to sanctions includes their nicknames:
- Andrey Zhukov (group leader) – Defender
- Maxim Galochkin – Bentley, Crypt, Volhvb
- Maxim Ruden – Buza, Silver, Binman
- Mikhail Tsarev Tsarev – Mango, Super Misha, Misha Krutysha
- Dmitry Putilin – Grad, Staff
- Maxim Haliullin – Kagas
- Sergey Loguntsov – Begemot
- Vadim Valiakhmetov – Weldon, Mentos, Vasm
- Artem Kurov – Naned
- Mikhail Chernov – Bullet
- Alexander Mozhaev – Green, Rocco
The National Cybersecurity Centre (NCSC) in the United Kingdom emphasizes that Trickbot, despite being commercially driven, also conducts reconnaissance operations.
In October 2021, the United States charged seven individuals in relation to Trickbot’s activities. Among them are Vladimir Dunaev, who was extradited from South Korea, and Alla Witte, who holds Latvian citizenship. They stand accused of large-scale cyber attacks on financial institutions and government bodies.