A member of the Ryuk ransomware group has pleaded guilty in U.S. federal court for his role in attacks targeting American organizations, and now faces up to 15 years in federal prison.
The case marks another step in ongoing law enforcement efforts to bring ransomware operators to justice. According to Security Affairs, the individual pleaded guilty to helping deploy attacks on U.S. companies.
The Ryuk ransomware group was responsible for a wave of attacks against hospitals, municipalities, and private enterprises during its period of activity, often demanding multi-million-dollar ransoms from victims. The group's operations were linked to the broader cybercrime ecosystem before the malware was officially discontinued by its developers in 2021.
Previous law enforcement actions against the Ryuk ecosystem have included indictments of individuals linked to the operation and disruption of associated cryptocurrency laundering networks.
For the cybersecurity community, the conviction reinforces that participation in ransomware operations carries significant legal consequences, and that international cooperation remains an increasingly effective tool in pursuing threat actors across borders.
Ryuk勒索軟件組織的一名成員因在針對美國組織的攻擊中扮演角色，在美國聯邦法院認罪，現面臨聯邦監獄最高15年刑期。
此案標誌着當局持續將勒索軟件操作者繩之以法的執法努力再進一步。據Security Affairs報道，該名人士就協助部署攻擊美國公司的行動認罪。
Ryuk勒索軟件組織在活動期間對醫院、市政機構及私營企業發動了一連串攻擊，經常向受害者索取數百萬美元的贖金。在該惡意軟件於2021年由其開發者正式停止運作前，該組織的行動與更廣泛的網絡犯罪生態系統有關聯。
此前針對Ryuk生態系統的執法行動包括起訴與該行動有關的個人，以及搗毀相關的加密貨幣洗錢網絡。
對網絡安全界而言，這次定罪重申參與勒索軟件行動會帶來重大的法律後果，而國際合作仍然是跨境追緝威脅行為者日益有效的工具。