International Authorities Indict, Sanction Additional INDRIK SPIDER Members and Detail Ties to BITWISE SPIDER and Russian State Activity

CrowdStrike describes a coordinated international law-enforcement disruption of BITWISE SPIDER’s LockBit leak site, the unsealing of an indictment against Aleksandr Ryzhenkov (an INDRIK SPIDER/Evil Corp affiliate), renewed sanctions against multiple INDRIK SPIDER members and associates, and evidence linking INDRIK SPIDER’s ransomware and banking malware operations (Dridex, BitPaymer, LockBit) to Russian intelligence support and continued criminal ransomware activity including use of the Fake Browser Update distribution service.