The Register: Evil Corp’s deep ties with Russia and NATO member attacks exposed

Source URL: https://www.theregister.com/2024/10/01/evil_corp_russia_relationship/
Source: The Register
Title: Evil Corp’s deep ties with Russia and NATO member attacks exposed

Feedly Summary: Ransomware criminals believed to have taken orders from intel services
The relationship between infamous cybercrime outfit Evil Corp and the Russian state is thought to be extraordinarily close, so close that intelligence officials allegedly ordered the criminals to carry out cyberattacks on NATO members.…

AI Summary and Description: Yes

Summary: The text reports on the alleged close relationship between the cybercrime group Evil Corp and Russian intelligence services, highlighting significant connections between high-ranking members of the group and Russian state officials. This relationship underscores the complexities of state-sponsored cyber operations and raises concerns regarding cybersecurity, as well as challenges in managing compliance and regulation in the face of such organized crime.

Detailed Description:
The article provides detailed insights into the interactions between the cybercrime organization Evil Corp and various Russian intelligence agencies, suggesting a high level of collaboration that has implications for global security and cyber operations. Major points include:

– **Evil Corp’s Operations**: The group is implicated in multiple high-profile cyberattacks, including ransomware attacks against NATO members, which were reportedly directed by the Russian government.

– **Russian Intelligence Involvement**:
– Intelligence officers allegedly coordinated cyberattacks with Evil Corp, further blurring the lines between cybercrime and state-sponsored activities.
– The affiliations of Evil Corp members with Russian intelligence bodies such as the FSB, SVR, and GRU were emphasized, indicating systemic issues surrounding cybersecurity.

– **Key Figures**:
– Maksim Yakubets, labeled as the “ringleader” of Evil Corp, is identified as a significant liaison between the group and Russian intelligence, with a reported bounty of $5 million for his capture.
– His father-in-law, Eduard Benderskiy, a former FSB officer, has been recognized as a strategic figure assisting in fostering connections between Evil Corp and the Russian state.

– **Operational Success Factors**:
– The support from involved family members, including Yakubets’ relatives, appears crucial for Evil Corp’s networking and operational success.
– A noteworthy element is the financial operations connected to the group, facilitating laundering and conversion of stolen funds into usable assets.

– **Broad Impact**:
– Evil Corp is estimated to have extorted approximately $300 million since 2014, affecting organizations across various sectors globally, including technology, finance, healthcare, and non-profits.

– **Context of Russian Intelligence**:
– Historical ties of other cybercrime groups (e.g., Conti, Trickbot) to Russian intelligence are mentioned, contextualizing Evil Corp’s operations within a larger framework of organized cybercrime and state relations.

This information is critical for cybersecurity and compliance professionals, highlighting the implications of state-sponsored cyber operations, the need for enhanced security protocols, and the urgent requirement for regulations to keep pace with evolving threats from organized cybercrime networks. Understanding these dynamics can aid organizations in developing robust cybersecurity strategies and improving their incident response frameworks.