Ukrainian and German authorities have recently taken a significant step forward in the fight against international cybercrime. Thanks to a joint operation, they have identified two Ukrainian suspects working for the Russian-linked ransomware group Black Basta, and added the alleged Russian leader of the group to the most wanted list.
The leader of the Black Basta group, identified as Oleg Evgenievich Nefedov, a 35-year-old Russian citizen, has been added to INTERPOL’s Red Notice and the European Union’s most wanted list. Nefedov operates under several pseudonyms including Tramp, GG, AA, Washingt0n and S.Jimmi, and is believed to be currently located in Russia. During police operations in the Ukrainian regions of Ivano-Frankivsk and Lviv, two Ukrainian citizens who specialized in initial access to victims’ networks were arrested. During the searches, authorities seized digital storage devices and cryptocurrencies.
This ransomware-as-a-service group, which emerged in April 2022, has targeted more than 500-600 organizations worldwide, including high-profile companies such as Rheinmetall, Ascension, ABB, Capita, and BT Group. According to investigations, the group has accumulated at least $107 million in Bitcoin ransom payments since 2022.
The importance of this operation cannot be understated. Black Basta represents one of the most significant ransomware threats in recent years, with attacks that have paralyzed critical infrastructure and caused enormous financial damage to affected organizations. International collaboration between law enforcement agencies demonstrates that, despite the challenges, effective mechanisms exist to counter cross-border cybercrime.
For companies, this case underscores the importance of implementing robust cybersecurity measures, including regular backups, timely security updates, and staff training. Individual users should remain vigilant about suspicious emails and keep their devices updated. It is essential for organizations to collaborate with authorities in case of attacks, thereby contributing to global efforts against ransomware groups.
- Key points to remember:
- Ukrainian and German authorities have identified two Ukrainian members of the Black Basta ransomware group and added the Russian leader Oleg Nefedov to international most wanted lists.
- Black Basta has attacked hundreds of organizations since 2022, accumulating over $107 million in ransoms.
- International cooperation is crucial in the fight against organized cybercrime operating across national borders.
Sources:
https://www.bleepingcomputer.com/news/security/black-basta-boss-makes-it-onto-interpols-red-notice-list/
https://thehackernews.com/2026/01/black-basta-ransomware-hacker-leader.html
https://securityaffairs.com/187008/cyber-crime/ukraine-germany-operation-targets-black-basta-russian-leader-wanted.html
Source: The Hacker News