February 20, 2024 at 08:34PM

In January, employees of the Ministry of Internal Affairs with the participation of F.A.C.C.T. Three members of the hacker group were detained. During the search, laptops and phones containing digital evidence were seized. The defendants were charged with creating, using and distributing malicious computer programs (Article 273 of the Criminal Code of the Russian Federation). This article provides for punishment in the form of restriction of freedom, but if the actions of the attacker created a threat or resulted in grave consequences, then they are punished by imprisonment for up to seven years.

The hacker group SugarLocker operated under the guise of the IT company Shtazi-IT. The scammers openly hired employees; contact could be made through a Telegram account, which, according to TASS, belongs to Alexander Ermakov. The hackers did not work in the CIS countries and distributed ransomware through networks and a remote access protocol. In F.A.C.C.T. noted that the ransomware program of the same name appeared on the shadow Internet back in 2021.

On January 23, the United States imposed sanctions against Alexander Ermakov for cybercrimes. Washington considers him involved in hacking the Medibank database. Australia also imposed sanctions against him.