TexasBitcoin

Ukrainian Arrested and Charged with Ransomware Attack on Kaseya

Nov 8, 2021 · Sourced to the U.S. Department of Justice

The charges described here are allegations. The defendant(s) are presumed innocent unless and until proven guilty in a court of law. This page reflects only what the Department of Justice has publicly announced, and links to the original release.

The Justice Department announced today recent actions taken against two foreign nationals charged with deploying Sodinokibi/REvil ransomware to attack businesses and government entities in the United States, amnounced Attorney General Merrick Garland, Deputy Attorney General Lisa

Announced

Nov 8, 2021

Status

Charged

Defendants

  • Yaroslav Vasinskyiage 22 · arrested and indicted
  • Yevgeniy Polyaninage 28 · charged

Charges

  • Conspiracy to commit fraud and related activity in connection with computers

    Max: 115 years in prison (all counts combined)Yaroslav Vasinskyi· indicted

  • Damage to protected computers

    Max: 115 years in prison (all counts combined)Yaroslav Vasinskyi· indicted

  • Conspiracy to commit money laundering

    Max: 115 years in prison (all counts combined)Yaroslav Vasinskyi· indicted

  • Conspiracy to commit fraud and related activity in connection with computers

    Max: 145 years in prison (all counts combined)Yevgeniy Polyanin· indicted

  • Damage to protected computers

    Max: 145 years in prison (all counts combined)Yevgeniy Polyanin· indicted

  • Conspiracy to commit money laundering

    Max: 145 years in prison (all counts combined)Yevgeniy Polyanin· indicted

Financial actions

  • seizure: $6.1 millionFunds traceable to alleged ransom payments received through Sodinokibi/REvil ransomware attacks and money laundering

From the announcement

Cybercrime is a serious threat to our country: to our personal safety, to the health of our economy, and to our national security. Our message today is clear. The United States, together with our allies, will do everything in our power to identify the perpetrators of ransomware attacks, to bring them to justice, and to recover the funds they have stolen from their victims.
Merrick Garland, Attorney General, U.S. Department of Justice
Our message to ransomware criminals is clear: If you target victims here, we will target you. The Sodinokibi/REvil ransomware group attacks companies and critical infrastructures around the world, and today’s announcements showed how we will fight back. In another success for the department’s recently launched Ransomware and Digital Extortion Task Force, criminals now know we will take away your profits, your ability to travel, and – ultimately – your freedom. Together with our partners at home and abroad, the Department will continue to dismantle ransomware groups and disrupt the cybercriminal ecosystem that allows ransomware to exist and to threaten all of us.
Lisa Monaco, Deputy Attorney General, U.S. Department of Justice
Ransomware can cripple a business in a matter of minutes. These two defendants deployed some of the internet’s most virulent code, authored by REvil, to hijack victim computers. In a matter of months, the Justice Department identified the perpetrators, effected an arrest, and seized a significant sum of money. The Department will delve into the darkest corners of the internet and the furthest reaches of the globe to track down cyber criminals.
Chad E. Meacham, Acting U.S. Attorney for the Northern District of Texas, U.S. Department of Justice
The arrest of Yaroslav Vasinskyi, the charges against Yevgeniy Polyanin and seizure of $6.1 million of his assets, and the arrests of two other Sodinokibi/REvil actors in Romania are the culmination of close collaboration with our international, U.S. government and especially our private sector partners. The FBI has worked creatively and relentlessly to counter the criminal hackers behind Sodinokibi/REvil. Ransomware groups like them pose a serious, unacceptable threat to our safety and our economic well-being. We will continue to broadly target their actors and facilitators, their infrastructure, and their money, wherever in the world those might be.
Christopher Wray, Director, Federal Bureau of Investigation (FBI)

Investigating agencies

Federal Bureau of InvestigationU.S. Attorney's Office for the Northern District of TexasJustice Department's Office of International AffairsNational Security Division's Counterintelligence and Export Control SectionComputer Crime and Intellectual Property SectionNational Police of UkraineProsecutor General's Office of UkraineEuropolEurojustRomania's National PoliceDirectorate for Investigating Organised Crime and TerrorismRoyal Canadian Mounted PoliceCourt of ParisBL2C (anti-cybercrime unit police)Dutch National PolicePoland's National Prosecutor's OfficePoland's Border GuardPoland's Internal Security AgencyPoland's Ministry of JusticeFinancial Crimes Enforcement NetworkCybersecurity and Infrastructure Security AgencyGermany's Public Prosecutor's Office StuttgartState Office of Criminal Investigation of Baden-WuerttembergSwitzerland's Public Prosecutor's Office II of the Canton of ZürichCantonal Police ZürichNational Crime AgencyU.S. Secret ServiceTexas Department of Information Resources

Case details

Prosecuting office
Northern District of Texas
Asset Seizure And ForfeitureCritical Infrastructure ThreatCryptocurrencyCybercrime Prosecution And ExtraditionInternational CooperationMoney LaunderingPublic-Private PartnershipRansomware And Digital Extortion Task ForceRansomware Attacks

Primary source

Every fact above is drawn from the Department of Justice's own announcement — a public-domain government record.

Read the original DOJ release →

This is a research and reference page compiled from public DOJ announcements, not legal advice. Details reflect the government's statements as of its release date and may not capture later developments such as appeals, dismissals, or overturned convictions. Defendants are presumed innocent unless and until proven guilty.