US to Charge Suspects Over Kaseya Ransomware Attack

US to Charge Suspects Over Kaseya Ransomware Attack

The US justice department is expected to announce it has charged a suspect over the damaging Kaseya ransomware attack in July, it has been reported.

CNN said Ukrainian national Yaroslav Vasinskyi and Russian national Yevgeniy Polyanin will face charges relating to the deployment of ransomware known as REvil in the incident, which affected up to 1500 organizations throughout the world. These include conspiracy to commit fraud, money laundering and other charges.

Vasinskyi was arrested in Poland last month, although Polyanin currently remains at large.

It is expected US officials will also reveal they seized at least $6m in ransomware payments received by Polyanin as part of their investigation into the incident.

REvil is believed to be responsible for numerous other high-profile ransomware attacks this year, including Colonial Pipeline, Apple and JBS. While the group was forced offline following the Kaseya attack, it’s ‘Happy Blog’ site re-emerged last month. However, it was quickly shut down again following operations by U.S. Cyber Command and a foreign government that targeted the criminals’ servers.

The news will be a great boost to the efforts of the Biden administration to disrupt the actions of ransomware gangs amid surging attacks.

Read More: https://www.infosecurity-magazine.com/news/us-charge-suspects-kaseya/