Ransomware Lawyers say Russian tourist detained in Armenia over mistaken identity in ransomware case July 17, 2026 Share By SC Staff (Adobe Stock) The Hacker News reports that a Russian tourist named Aleksandr Ermakov is being held in Armenia on a U.S. extradition request related to a ransomware case, but his lawyers claim authorities have the wrong man. The U.S. is seeking an individual with the same name who is a suspect in REvil ransomware attacks. The detained Russian, Aleksandr Yuryevich Ermakov, was apprehended in Armenia on June 28, based on a U.S. request. His legal team asserts that the U.S. is pursuing Aleksandr Gennadievich Ermakov, a sanctioned individual linked to the REvil ransomware group, known for attacks between April 2019 and July 2021. This sanctioned Ermakov is also reportedly serving a sentence in Russia, making his extradition from Armenia unlikely. The U.S. charging documents and Interpol notice allegedly lack sufficient identifying details, such as a patronymic, leading to a potential case of mistaken identity. The defense suggests an automated system may have matched the names without proper verification. The targeted REvil attacks impacted over 1,000 entities, including private companies, government offices, schools, and hospitals. Source: The Hacker News An In-Depth Guide to Ransomware Get essential knowledge and practical strategies to protect your organization from ransomware attacks. Learn More SC Staff Related Malware ACR Stealer exploits user interaction to steal sensitive data SC Staff July 17, 2026 Microsoft has detailed two primary intrusion chains used by ACR Stealer. Malware MacOS malware hijacks Telegram sessions, targets crypto wallets SC Staff July 17, 2026 The macOS malware targets information stored locally on infected devices, including passwords, browser cookies, Apple Notes and Telegram Desktop session files. Breach Ernst & Young data breach exposes client tax information SC Staff July 17, 2026 The breach was detected on April 23 when Ernst & Young noticed anomalous activity on its networks. Related Events Cybercast Ransomware reloaded: Finding resilience when attackers wield AI On-Demand Event Virtual Conference Ransomware Resilience: Strategies to Defend, Mitigate, and Recover On-Demand Event Get daily email updates SC Media's daily must-read of the most current and pressing daily news Business Email By clicking the Subscribe button below, you agree to SC Media Terms of Use and Privacy Policy . Subscribe You can skip this ad in 5 seconds