Australian Cybersecurity Expert Warns REvil's Aleksandr Ermakov at Risk Due to Crypto Wealth
Australian cybersecurity expert Patrick Gray has warned that Aleksandr Ermakov, a suspected top member of the notorious ransomware group REvil, may be at risk due to his likely cryptocurrency wealth. Ermakov, a 33-year-old Russian man, has been accused of stealing data from Australian health insurance giant Medibank and is the first cybercriminal to be sanctioned by Australia.
Ermakov, who has used aliases such as GustaveDore, JimJones, and Blade Runner on Russian cybercrime forums, is believed to be linked to REvil. This group has infected around 175,000 computers worldwide and extorted at least $200 million in ransom. The stolen Medibank data, including sensitive health records, was leaked after the company refused to pay a $10 million demand. The data was published on a blog previously controlled by REvil affiliates, suggesting a connection between Ermakov and the group.
Authorities in Australia, the UK, and the US have imposed financial sanctions on Ermakov. In 2020, he advertised services for a Russian tech firm called Shtazi, which could be hired for programming, web development, and 'reputation management'. Mikhail Borisovich Shefel, also known as Rescator, is connected to Ermakov and Shtazi.
Ermakov's alleged role in REvil and the Medibank data breach has drawn international attention. His likely possession of large sums of cryptocurrency may put him at risk, as warned by Patrick Gray. The sanctions imposed on him by multiple countries highlight the global effort to combat cybercrime.
Read also:
- Bishkek: A Time-Capsule City of Soviet Statues and Architecture
- Tata Electronics & Bosch Ink MoU to Boost India's Electronics Manufacturing
- Romania's EV Market Sees Mixed Developments: Dacia Retains Lead, Charging Infrastructure Grows
- ACC Kicks Off First Gigafactory in France, Secures €4.4 Billion Debt Package