Ukrainian and German authorities announced on Thursday that they have identified suspects related to Black Basta – a ransomware group linked to Russia – and officially launched an international manhunt for the remaining individuals. According to Ukraine’s cybersecurity police, two Ukrainian citizens have been identified as active members of the group, while a Russian citizen is accused of being the mastermind and has been placed on Interpol’s international wanted list.
The investigation was conducted in cooperation with Ukraine, Germany, Switzerland, the Netherlands, the UK, and Europol. Black Basta is considered one of the most dangerous cybercriminal organizations in recent years, causing hundreds of millions of euros in damages to businesses, hospitals, and public organizations across Europe and the US from 2022 to 2025.
Raids in western Ukraine have recovered numerous digital evidence and cryptocurrency assets, demonstrating the scale and sophistication of this network.