1989-04-20

Serpukhov, Russia

https://eur-lex.europa.eu/legal-content/EN/TXT/PDF/?uri=OJ:L_202401778

In addition, Mikhail Tsarev and Maksim Galochkin, key players in the deployment of the malwares ‘Conti’ and ‘Trickbot’ and involved in ‘Wizard Spider’, are also sanctioned. Trickbot is a malicious spyware program, created and developed by the threat group ‘Wizard Spider’, which has conducted ransomware campaigns in a variety of sectors, including essential services such as health and banking, and is therefore responsible for significant economic damage in the European Union.

https://www.consilium.europa.eu/en/press/press-releases/2024/06/24/cyber-attacks-six-persons-added-to-eu-sanctions-list-for-malicious-cyber-activitiescyberattacks-against-eu-member-states-and-ukraine/

2024-06-24

EU

Restrictive measures against cyber-attacks threatening the Union or its Member States

EU-horizontal

Cyber-attacks

Asset freeze and prohibition to make funds available, Restrictions on admission

- All assets of the listed persons and entities should be frozen. It is also prohibited to make any funds or assets directly or indirectly available to them. - Member States shall enforce travel restrictions on persons listed in the Annex of Council Decision(CFSP) 2019/797.

Through the adoption of the “Cyber Diplomacy Toolbox” on 19 June 2017, the Council stressed the growing need to protect the integrity and security of the EU, its Member States and their citizens against cyber threats and malicious cyber activities. At the European Council on 18 October 2018, Member States called for the introduction of a new EU sanctions regime to build up the EU and its Member States’ capacity to respond to and to deter cyber-attacks. The Council established the new sanctions regime on 17 May 2019, introducing targeted restrictive measures against cyber-attacks threatening the Union or its Member States. The measures consist of asset freeze and travel ban of persons and/or entities responsible for cyber-attacks or attempted cyber-attacks, as well as those involved in or offering financial, technical or material support for these attacks and those who assist, encourage, facilitate or are associated with them.