Igor Olegovich Turashev
Sanctioned entityBorn 15 Jun 1981 (45 years old),Russia. Named in 4 sanctions listings.
Summary
The Director Disqualification Sanction was imposed on 09/04/2025.
Igor Olegovich Turashev is wanted for his involvement with computer malware which infected tens of thousands of computers, in both North America and Europe, resulting in financial losses in the tens of millions of dollars. Turashev allegedly handled a variety of responsibilities for the Bugat/Cridex/Dridex malware conspiracy including system administration, management of internal control panels, and oversight of the botnet operations. He allegedly conspired to disseminate the malware through phishing emails, to use the malware to capture online banking credentials, and to use these captured credentials to steal money from the victims’ bank accounts. He, subsequently, used the malware to install ransomware on victims’ computers.
Senior administrator of Evil Corp and DoppelPaymer
Sanctions and listings4
- Effective
- 1 Oct 2024
UK sanctions relating to cyber activity - The Cyber (Sanctions) (EU Exit) Regulations 2020
UK; Foreign, Commonwealth & Development OfficeUK FCDO Sanctions ListUnited Kingdom
Director Disqualification Sanction, travel ban and asset freeze
Igor Olegovich TURASHEV is a member of Evil Corp, and has been involved in relevant cyber activity, including being responsible for, engaging in and providing support for malicious cyber activity that resulted in the unauthorised access and exfiltration of sensitive data from UK infrastructure and networks. He has also provided technical assistance that could contribute to relevant cyber activity. Igor TURASHEV was involved in malware and ransomware operations. Evil Corp's malicious cyber activity involved a concerted effort to compromise UK health, government and public sector institutions, and commercial technology companies, for financial gain, which undermined or was intended to undermine the integrity, prosperity and security of the United Kingdom and its allies.
Igor Olegovich TURASHEV is a member of Evil Corp, and has been involved in relevant cyber activity, including being responsible for, engaging in and providing support for malicious cyber activity that resulted in the unauthorised access and exfiltration of sensitive data from UK infrastructure and networks. He has also provided technical assistance that could contribute to relevant cyber activity. Igor TURASHEV was involved in malware and ransomware operations. Evil Corp's malicious cyber activity involved a concerted effort to compromise UK health, government and public sector institutions, and commercial technology companies, for financial gain, which undermined or was intended to undermine the integrity, prosperity and security of the United Kingdom and its allies.
Programme GB-CYBReference CYB0049Reference 16585Last updated 9 Apr 2025gov.ukgov.uk
Significant Cyber Incidents Sanctions Regime - Autonomous (Thematic - Cyber)
Department of Foreign Affairs and TradeAustralian Sanctions Consolidated ListAustralia
Travel ban and targeted financial sanction
Autonomous Sanctions (Designated Persons and Entities and Declared Persons – Thematic Sanctions) Amendment (No. 5) Instrument 2024
Programme AU-CYBLast updated 2 Oct 2024dfat.gov.audfat.gov.au
- Listed
- 5 Dec 2019
Cyber-Related Sanctions - CYBER2
Office of Foreign Assets ControlUS OFAC Specially Designated Nationals (SDN) ListUnited States
CYBER2 and block
Secondary sanctions risk: Ukraine-/Russia-Related Sanctions Regulations, 31 CFR 589.201
Executive Order 13694 (Cyber)
Programme US-CYBReference 26670treasury.govofac.treasury.gov
- Listed
- 27 Dec 2019
- Effective
- 5 Dec 2019
Reciprocal
OFACUS SAM Procurement ExclusionsUnited StatesActive
Prohibition/Restriction
Redacted for Security Reasons
Connections1
Other links1
- DRIDEX GANGSanctionedDebarredAgent for"Acting for or on behalf of"RussiaMoldova
Other names9
Also known as3
Weak aliases6
Spellings the source flags as too generic to establish a match on their own.
This page shows the public record as its publishers state it. A name here is not by itself a finding: whether a record refers to a particular person or company is what screening decides. Read the full notice.