The U.S. and U.K. Sanction Members of Russia-Based Trickbot Cybercrime Gang

February 10, 2023

In a first-of-its-kind joint action today, the United States and the United Kingdom sanctioned seven individuals associated with the Russia-based cybercrime gang Trickbot. Trickbot is a type of malware that has been used in cyber attacks against businesses and individuals all over the world. According to Chainalysis data, strains related to Trickbot have extorted at least $724 million worth of cryptocurrency in their lifetimes. The blockchain allows us to link ransomware actors together, including developers like Trickbot, affiliates like those who work for Conti, and other enablers. These payments are likely in exchange for work these actors completed for Trickbot operations or for funding services and subscriptions needed for development.