Sodinokibi/REvil Affiliate Sentenced for Role in $700M Ransomware Scheme
May 1, 2024 · Sourced to the U.S. Department of Justice
A Ukrainian national was sentenced today to 13 years and seven months in prison and ordered to pay over $16 million in restitution for his role in conducting over 2,500 ransomware attacks and demanding over $700 million in ransom payments.
Defendants
- Yaroslav Vasinskyi — age 24 · sentenced
Charges
Conspiracy to commit fraud and related activity in connection with computers
Yaroslav Vasinskyi· pleaded guilty
Damage to protected computers
Yaroslav Vasinskyi· pleaded guilty
Conspiracy to commit money laundering
Yaroslav Vasinskyi· pleaded guilty
Financial actions
- restitution: over $16 million — Restitution ordered for role in conducting over 2,500 ransomware attacks and demanding over $700 million in ransom payments
- forfeiture: 39.89138522 Bitcoin — Forfeiture of ransom payments traceable to alleged ransom payments received by members of the conspiracy through two related civil forfeiture cases
- forfeiture: $6.1 million — Forfeiture of U.S. dollar funds traceable to alleged ransom payments received by other members of the conspiracy through two related civil forfeiture cases
From the announcement
“As this sentencing shows, the Justice Department is working with our international partners and using all tools at our disposal to identify cybercriminals, capture their illicit profits, and hold them accountable for their crimes,”
“Deploying the REvil ransomware variant, the defendant reached out across the globe to demand hundreds of millions of dollars from U.S. victims,”
“But this case shows the Justice Department’s reach is also global—working with our international partners, we are bringing to justice those who target U.S. victims, and we are disrupting the broader cybercrime ecosystem.”
“Today, the FBI’s close collaboration with our worldwide partners has again ensured that a cybercriminal who thought he was beyond our reach faces the consequences of his actions,”
“We will continue to relentlessly pursue cyber criminals like Vasinksyi wherever they may hide, while we disrupt their criminal schemes, seize their money and infrastructure, and target their enablers and criminal associates to the fullest extent of the law.”
“Yaroslav Vasinskyi and his co-conspirators hacked into thousands of computers around the world and encrypted them with ransomware,”
“Then they demanded over $700 million in ransom payments and threatened to publicly disclose victims’ data if they refused to pay. Although the conspirators attempted to cover their tracks by laundering the payments from victims, Vasinskyi could not hide from law enforcement. Vasinskyi’s sentence today should serve as a reminder to ransomware actors everywhere: we will track you down and bring you to justice.”
“Using ransomware, malicious actors from around the globe can paralyze U.S. companies in a matter of minutes,”
“But as cybercriminals work together to deploy these attacks, law enforcement throughout the United States stands ready to dismantle their criminal enterprises. The dedicated prosecutors from the Northern District of Texas and the skilled agents at the FBI Dallas Field Office proved once again today to ransomware actors everywhere: When you hit targets in the United States, the Justice Department and its partners will come after you.”
Investigating agencies
Case details
- Prosecuting office
- Northern District of Texas
- Assets
- Bitcoin
Primary source
Every fact above is drawn from the Department of Justice's own announcement — a public-domain government record.
Read the original DOJ release →This is a research and reference page compiled from public DOJ announcements, not legal advice. Details reflect the government's statements as of its release date and may not capture later developments such as appeals, dismissals, or overturned convictions. Defendants are presumed innocent unless and until proven guilty.