Europol Adds Ukrainian Ransomware Kingpin to EU Most Wanted List

Ukrainian cybercrime suspect added to EU Most Wanted list with $10M reward for major ransomware attacks including 2019 Norsk Hydro incident. International investigation ongoing.

ukrainian-ransomware-kingpin-eu-wanted
Facebook X LinkedIn Bluesky WhatsApp

International Manhunt for Cybercrime Mastermind

A Ukrainian national believed to be a leading figure in major ransomware attacks has been added to the EU Most Wanted list, with a $10 million reward offered for information leading to his arrest. The suspect is accused of orchestrating the devastating 2019 ransomware attack against Norwegian aluminum giant Norsk Hydro, among other high-profile cyber assaults.

Global Investigation and Arrests

The identification follows a complex international investigation involving law enforcement agencies from France, Germany, the Netherlands, Norway, Switzerland, Ukraine, the United Kingdom, and the United States. Europol and Eurojust provided crucial coordination support throughout the operation.

"This individual represents one of the most significant cybercrime threats we've encountered in recent years," stated a Europol spokesperson. "His network has caused billions in damages across multiple continents."

LockerGoga Ransomware Deployment

The wanted fugitive deployed the notorious LockerGoga ransomware, which encrypts victims' files and demands payment for their release. The malware has been particularly destructive against industrial and manufacturing targets, causing widespread operational disruptions.

Previous Successes and Ongoing Efforts

Law enforcement has already achieved significant successes against this criminal network, with several members arrested in Ukraine earlier this year. Investigators have mapped the entire organizational structure, identifying actors at every level from malware developers to money launderers handling the illicit proceeds.

The case falls under the European Multidisciplinary Platform Against Criminal Threats (EMPACT), which focuses on the most serious organized crime threats affecting the EU. EMPACT strengthens intelligence sharing and operational cooperation between national authorities and international partners.

Europol continues to support the international search and urges the public to check the EU Most Wanted website for the suspect's profile and share any relevant information.

Related

global-cybercrime-syndicates-billions
Crime

Global Cybercrime Syndicates Steal Billions Online

Global cybercrime syndicates are projected to cost $10.5 trillion by 2025, using sophisticated tactics including...

ukrainian-ransomware-kingpin-eu-wanted
Crime

Europol Adds Ukrainian Ransomware Kingpin to EU Most Wanted List

Ukrainian cybercrime suspect added to EU Most Wanted list with $10M reward for major ransomware attacks including...

ransomware-attacks-surge-2025
Crime

Cyber Extortion Surge: Ransomware Attacks Hit Record High

Ransomware attacks surge in 2025 with 200% increase, targeting critical infrastructure and demanding average $250K...

cybercrime-conference-law-enforcement
Crime

Global Cybercrime Conference Unites Law Enforcement

Global law enforcement agencies convened to coordinate cybercrime operations, share tactical resources, and...

pro-russian-cybercrime-network-disrupted
Crime

Global Operation Disrupts Pro-Russian Cybercrime Network

A global law enforcement operation disrupted pro-Russian hacker group NoName057(16), resulting in arrests,...

youths-arrested-hacking-retail-chains
Crime

Four Youths Arrested for Hacking British Retail Chains

Four UK youths arrested for ransomware attacks on Marks & Spencer, Co-op and Harrods that caused major disruptions...