Europol Adds Ukrainian Ransomware Kingpin to EU Most Wanted List

International Manhunt for Cybercrime Mastermind

A Ukrainian national believed to be a leading figure in major ransomware attacks has been added to the EU Most Wanted list, with a $10 million reward offered for information leading to his arrest. The suspect is accused of orchestrating the devastating 2019 ransomware attack against Norwegian aluminum giant Norsk Hydro, among other high-profile cyber assaults.

Global Investigation and Arrests

The identification follows a complex international investigation involving law enforcement agencies from France, Germany, the Netherlands, Norway, Switzerland, Ukraine, the United Kingdom, and the United States. Europol and Eurojust provided crucial coordination support throughout the operation.

"This individual represents one of the most significant cybercrime threats we've encountered in recent years," stated a Europol spokesperson. "His network has caused billions in damages across multiple continents."

LockerGoga Ransomware Deployment

The wanted fugitive deployed the notorious LockerGoga ransomware, which encrypts victims' files and demands payment for their release. The malware has been particularly destructive against industrial and manufacturing targets, causing widespread operational disruptions.

Previous Successes and Ongoing Efforts

Law enforcement has already achieved significant successes against this criminal network, with several members arrested in Ukraine earlier this year. Investigators have mapped the entire organizational structure, identifying actors at every level from malware developers to money launderers handling the illicit proceeds.

The case falls under the European Multidisciplinary Platform Against Criminal Threats (EMPACT), which focuses on the most serious organized crime threats affecting the EU. EMPACT strengthens intelligence sharing and operational cooperation between national authorities and international partners.

Europol continues to support the international search and urges the public to check the EU Most Wanted website for the suspect's profile and share any relevant information.