Armenia Detains Russian Tourist on U.S. REvil Hacker Warrant

Armenia detained Aleksandr Ermakov, a Russian tourist, on June 28, 2024, at Yerevan's Zvartnots airport, based on a U.S. extradition request. The U.S. seeks his extradition in connection with the REvil ransomware group, identifying him as a suspect. Ermakov's wife, Maria Yurova, stated that border officers apprehended him after showing him a photograph from his VKontakte social media page.

Lawyers for Ermakov assert that the detained individual is not the REvil suspect the U.S. is seeking. They claim the U.S. warrant is for a different Aleksandr Ermakov, who is reportedly involved in cybercrime activities. The defense team has presented evidence to Armenian authorities suggesting a case of mistaken identity. They are actively working to secure his release, arguing that the evidence presented by the U.S. does not definitively link their client to the alleged cybercrimes.

The REvil ransomware group was known for its significant cyberattacks, including a major incident targeting the U.S. meat processing company JBS in May 2021, for which the group allegedly demanded an $11 million ransom. The U.S. Department of Justice has been pursuing charges against individuals associated with the group. The current detention of Aleksandr Ermakov highlights the ongoing international efforts to apprehend and prosecute cybercriminals.