Aleksandr Viktorovich Ryzhenkov

Designation identifiers

UKSL unique ID

CYB0062

OFSI group ID

16593

Designation type

Individual

Date designated

1 October 2024

Last updated

9 April 2025

Regimes

• The Cyber (Sanctions) (EU Exit) Regulations 2020

Designation sources

• UK

Sanctions imposed

• Asset freeze
• Travel Ban
• Director Disqualification Sanction

Official reasons

• Aleksandr Viktorovich RYZHENKOV is a member of Evil Corp, and has been involved in relevant cyber activity, including being responsible for, engaging in and providing support for malicious cyber activity that resulted in the unauthorised access and exfiltration of sensitive data from UK infrastructure and networks. He has also provided technical assistance that could contribute to relevant cyber activity. Aleksandr RYZHENKOV was a senior member and manager of Evil Corp, and was involved in the development and deployment of ransomware that was used by Evil Corp to carry out its relevant cyber activity. Additionally, Aleksandr RYZHENKOV is linked to the deployment of LockBit ransomware and is associated with UNC2165 (an evolution of Evil Corp affiliated actors). Evil Corp's malicious cyber activity involved a concerted effort to compromise UK health, government and public sector institutions, and commercial technology companies, for financial gain, which undermined or was intended to undermine the integrity, prosperity and security of the United Kingdom and its allies.

Other information

• The Director Disqualification Sanction was imposed on 09/04/2025.