Key Takeaways
Yaroslav Vasinskyi, a Ukrainian hacker who goes by the alias Rabotnik, has been jailed for 13 years and seven months.
The Department of Justice announced on Wednesday that Vasinskyi took part in orchestrating more than 2,500 ransomware attacks. The hacker also demanded more than $700 million in ransom.
This sentencing is part of a broader crackdown on ransomware groups, a commitment made by US President Joe Biden in November 2021 following a significant attack by the REvil ransomware project. The hackers demanded $70 million in Bitcoin after attacking Miami-based software provider Kaseya.
In response to US requests, Russian authorities conducted a raid in March 2022 that led to the dismantling of REvil.
According to Attorney General Merrick B. Garland:
“As this sentencing shows, the Justice Department is working with our international partners and using all tools at our disposal to identify cybercriminals, capture their illicit profits, and hold them accountable for their crimes.”
Deputy Attorney General Lisa Monaco stated that by using the REvil ransomware variant, the defendant targeted victims globally, demanding hundreds of millions of dollars from American entities.
She emphasized the DOJ’s dedication to prosecuting those who target American victims and disrupting the wider cybercrime ecosystem. In 2021, CNN reported Vasinskyi was indicted together with Yevgeniy Polyanin, a fellow REvil operative from Russia.
Monaco also said :
“Deploying the REvil ransomware variant, the defendant reached out across the globe to demand hundreds of millions of dollars from US victims.”
During their investigation, American authorities seized at least $6 million in funds linked to ransom payments which Polyanin received. Additionally, in 2021, the Treasury Department placed sanctions on Vasinskyi and Polyanin, as well as a cryptocurrency exchange accused of facilitating financial transactions for ransomware criminals.
Rabotnik, 24, has been ordered to pay over $16 million in restitution as part of his affiliation with groups using Sodinokibi or REvil ransomware to demand cryptocurrency payments and employ mixing services to obscure their criminal proceeds.
Previously extradited to the US from Poland, he pleaded guilty to an 11-count indictment. His charges included:
In 2023, the DOJ seized nearly 40 Bitcoin, worth about $2.3 million. This came together with $6.1 million in funds linked to ransom payments received by his co-conspirators.