The Tverskoy Court of Moscow has taken into custody for two months another alleged hacker of the REvil group – Russian Mikhail Golovachuk. He is suspected of illegal circulation of payment means. About it informs “Interfax” with reference to the press secretary of the court Ksenia Rozina.
Thus, three hackers allegedly involved in this group have already been arrested. The day before, the Tverskoy Court of Moscow sent Roman Muromsky and Andrei Bessonov to jail until March 13.
On January 14, the FSB of the Russian Federation announced the detention of a number of members of the REvil group. Their names were not released by the secret service.
Over 426 million rubles were seized from the homes of 14 members of the organized criminal community, including in cryptocurrency, $600 thousand, 500 thousand euros, as well as computer equipment, crypto wallets used to commit crimes, 20 premium cars purchased with cash, obtained by criminal means.
It was reported that the operation was carried out after the appeal of the US authorities. According to the FSB, the full composition of REvil and the involvement of its members in the illegal circulation of means of payment have been established. The detained members of the group were charged under Article 187 of the Russian Criminal Code. According to media reports, REvil members with Russian citizenship will not be extradited to the United States.
At the same time, the detention of the leader of the group was not reported. By data a number of media outlets, the head of the group is Maxim Yakubets, the son-in-law of the former FSB commando Eduard Bendersky, who now heads the Vympel charitable foundation. Friends call him “very influential” and say that he has “an oil industry, a bunch of businesses and his own PMC in the Middle East.”
Formerly CNN informedthat the US authorities plan to bring charges against Ukrainian citizen Yaroslav Vasinsky and Russian citizen Yevgeny Polyanin. According to American investigators, they were part of the REvil group and were involved in cybercrimes. As part of the investigation, law enforcement agencies seized $6 million sent to Polyanin as a ransom.
Vasinsky and Polyanin are accused of extortion, fraud and money laundering. Vasinsky, 22, was arrested in October 2021 in Poland. He faces extradition to the US. Polyanin, 28, remains at large. According to the FBI, he is in Barnaul. Both of them were included in the list of persons against whom sanctions were imposed.
Vasinsky, according to investigators, distributed the REvil virus. Using this program, hackers encrypted data on an infected computer, and then extorted money for help in decrypting it. The damage caused by REvil to American companies exceeds $200 million.
On July 4, US Independence Day, hackers staged a cyberattack on Florida-based software company Kaseya. Thanks to this, they were able to infect the computers of more than 1,500 companies around the world that were Kaseya’s customers with the virus.
It was also reported that earlier this year, the group demanded $50 million from Apple after hacking into the computer systems of one of the technology giant’s suppliers.
In addition, the FBI suspected members of REvil in the May attack on JBS, which occupies a fifth of the American beef market. Due to a cyber attack, JBS was forced to temporarily stop production at factories in Australia, Canada and the United States. The company paid hackers $11 million to unlock its computer systems.
After the July cyberattack, REvil’s websites stopped functioning. The media noted that this happened shortly after a telephone conversation between US President Joe Biden and Russian President Vladimir Putin, which was reported on July 9. According to the New York Times, Biden demanded that Putin take action against ransomware used to cyber-attack US infrastructure.
In September, the REvil sites were up and running again. However, in October, according to the Washington Post, members of the US Cyber Command managed to hack REvil’s computer infrastructure and disable it.
According to Chainalysis, victims of ransomware cyberattacks paid a ransom worth about $350 million in 2020. But the real profits of hackers using these viruses can be even higher.
In early November, the US State Department offered a $10 million reward for important information about Russian hackers using the DarkSide program. In May, because of the harm she had caused, she was for several days terminated work of a major American fuel supplier Colonial Pipeline.