Texas Man Sentenced to 13 Years for $700M Ransomware Scheme

A Ukrainian national has been sentenced to 13 years and seven months in prison and ordered to pay over $16 million in restitution for his role in conducting more than 2,500 ransomware attacks and demanding over $700 million in ransom payments.

Yaroslav Vasinskyi, 24, was sentenced in the Northern District of Texas for his involvement in the Sodinokibi/REvil ransomware scheme, which targeted victims globally. The scheme used malware to encrypt data on victim computers, allowing the attackers to demand ransom payments in exchange for the decryption key.

Court documents reveal that Vasinskyi and his co-conspirators demanded ransom payments in cryptocurrency and used cryptocurrency exchangers and mixing services to hide their ill-gotten gains. When victims refused to pay, the co-conspirators publicly exposed their victims’ data, further amplifying the pressure to comply.

The Justice Department has been actively pursuing cybercriminals, working with international partners to identify and bring to justice those responsible for cybercrimes. Deputy Attorney General Lisa Monaco stated, “Deploying the REvil ransomware variant, the defendant reached out across the globe to demand hundreds of millions of dollars from U.S. victims. But this case shows the Justice Department’s reach is also global—working with our international partners, we are bringing to justice those who target U.S. victims, and we are disrupting the broader cybercrime ecosystem.”

Principal Deputy Assistant Attorney General Nicole M. Argentieri added, “Yaroslav Vasinskyi and his co-conspirators hacked into thousands of computers around the world and encrypted them with ransomware. Then they demanded over $700 million in ransom payments and threatened to publicly disclose victims’ data if they refused to pay.”

Vasinskyi previously pleaded guilty to an 11-count indictment charging him with conspiracy to commit fraud and related activity in connection with computers, damage to protected computers, and conspiracy to commit money laundering. He was extradited to the United States from Poland and will serve his sentence in a federal prison.

U.S. Attorney Leigha Simonton for the Northern District of Texas emphasized the importance of holding cybercriminals accountable for their crimes. “Using ransomware, malicious actors from around the globe can paralyze U.S. companies in a matter of minutes. But as cybercriminals work together to deploy these attacks, law enforcement throughout the United States stands ready to dismantle their criminal enterprises.”

The Department also obtained the final forfeiture of millions of dollars’ worth of ransom payments obtained through two related civil forfeiture cases, which included 39.89138522 Bitcoin and $6.1 million in U.S. dollar funds traceable to alleged ransom payments received by other members of the Sodinokibi/REvil network.

As this case demonstrates, the Justice Department will continue to pursue cybercriminals and disrupt their schemes, no matter where they may hide. The sentence imposed on Vasinskyi serves as a reminder to ransomware actors everywhere: we will track you down and bring you to justice.

FBI Director Christopher Wray highlighted the FBI’s close collaboration with international partners in bringing Vasinskyi to justice. “We will continue to relentlessly pursue cybercriminals like Vasinskyi wherever they may hide, while we disrupt their criminal schemes, seize their money and infrastructure, and target their enablers and criminal associates to the fullest extent of the law.”

Attorney General Merrick B. Garland praised the Justice Department’s efforts in combating cybercrime. “As this sentencing shows, the Justice Department is working with our international partners and using all tools at our disposal to identify cybercriminals, capture their illicit profits, and hold them accountable for their crimes.”