01Overview

Every OFAC, EU, UK, and AU designation, DOJ indictment, and Europol/NCA action against the RU/CIS ransomware ecosystem, mapped to entity profiles on this site, with current status per target. Source of truth: data/enforcement.json.

02Pressure Matrix

Which enforcement levers have touched each entity. A row of empty cells on an active entity is an unexploited leverage point.

Show All Groups Exchanges / Laundering BPH Gaps only
EntityType OFAC EU/UK/AU US charges LE ops Operational status
action on record · none found Gap active entity with no meaningful enforcement pressure
03Actions Log

Chronological record of enforcement actions, 2016 to present. Click a column header to sort. Every row links to its primary source.

Type All Sanctions Criminal process Takedowns / ops
Authority All OFAC DOJ EU / UK / AU Europol / NCA Russia (domestic)
Period All 2016-2024 2025 2026
Date ↕ AuthorityActionTarget ↕ PageOutcomeConf.Src
04Individuals

Tracked persons across the ecosystem: operators, initial access and malware suppliers, launderers, hosters, facilitators. Statuses current to the as-of date.

Status All At large / fugitive In custody / arrested Judicial outcome Sanctioned only
NameAliasesAffiliationRewardStatusPage
05Entities

Entity-level rollup: designations, operations, prosecutions, and operational status.

EntityTypeDesignationsOperations / prosecutionsStatus
06Gaps and Method

Where no lever has been pulled, and how this dataset is maintained.

Docket follow-ups: Astamirov and Vasiliev sentences (D.N.J.), Panev trial docket, Vardanyan trial (D. Or.), Besciokov extradition from India, Stryzhak sentence (E.D.N.Y.). Confirmed actions with no publicly reported disposition.
Confidence Confirmedofficial source or multiple major outlets Crediblereputable single source or self-reported claims