Armenia Detains Russian Tourist on U.S. Warrant for REvil Hacker, Lawyers Say Wrong Man

The article describes Armenia detaining a Russian tourist named Aleksandr Ermakov on a U.S. extradition request tied to alleged REvil/Sodinokibi and SugarLocker ransomware activity and references sanctions related to the 9.7 million-record Medibank breach; the detainee’s lawyers say he is a different Aleksandr Ermakov and point to possible misidentification. It outlines alleged forum handles and links to malware development, a prior Russian sentence for co-writing SugarLocker, claims of over 1,000 REvil victims, and uncertainty around identity verification and legal proceedings.