The person at the center of this case
Multiple ransomware attack victims (corporate and organizational targets)
Cold Case · Open
3 years waiting · since 2023
ALEKSANDR RYZHENKOV
Justice for Multiple ransomware attack victims (corporate and organizational targets) — the trail went cold in 2023, but the truth hasn't.
Start here
Key leads to think about
🎯
suspect
Lead #1What is Ryzhenkov's current location and how is he evading international law enforcement?
🔍
evidence
Lead #2How can law enforcement trace cryptocurrency payments made through the BitPaymer ransomware ransom demands?
👤
person
Lead #3What is the nature and extent of Ryzhenkov's relationship with Maksim Yakubets (AQUA) and their operational structure?
Aleksandr Ryzhenkov is wanted by the FBI for his alleged role in coordinating ransomware attacks using BitPaymer malware, which encrypted victims' computers and demanded cryptocurrency payments. Working closely with Russian cybercriminal Maksim Yakubets, Ryzhenkov allegedly deployed the malware and money laundering schemes across multiple victims. A federal arrest warrant was issued on March 22, 2023, but Ryzhenkov is believed to be in Russia, making his apprehension dependent on international cooperation and intelligence.
Case
#799
FBI (United States District Court, Northern District of Texas)
Try asking
Claim this imported case
A one-time $10 claim transfers this imported case workspace to your account. You get 10 uploads for this case, 25 daily AI questions for this case, and public tips with files route to you.
10 uploads25 AI questions/day
This does not start a subscription. When the included limits are reached, the Personal plan unlocks more workspace capacity.
More leads to consider
Beyond the top three above — each detail below could be the thread that pulls this case open.
💡
clue
Lead #4How many victims have been targeted by BitPaymer ransomware attributed to Ryzhenkov and what sectors were most affected?
Have information about any of these leads?
Even the smallest detail could be the key to solving this case.
Official wording
Source Narrative
Conspiracy to Commit Fraud and Related Activity in Connection with Computers; Intentional Damage to a Protected Computer; Transmitting a Demand in Relation to Damaging a Protected Computer; Conspiracy to Commit Money Laundering Caution: Aleksandr Ryzhenkov is wanted for his alleged involvement in ransomware attacks and money laundering activities. It is alleged that, through the use and deployment of BitPaymer ransomware, Ryzhenkov left electronic notes in the form of a text file on victims’ computers.
The notes included email addresses for the victims and provided a virtual currency address to use to pay the ransom. Ryzhenkov is known to be a close associate of Maksim Yakubets , aka “AQUA”, an alleged Russian cyber criminal.
On March 22, 2023, a federal arrest warrant was issued for Ryzhenkov in the United States District Court, Northern District of Texas, Dallas, Texas, after he was charged with Conspiracy to Commit Fraud and Related Activity in Connection with Computers; Intentional Damage to a Protected Computer; Transmitting a Demand in Relation to Damaging a Protected Computer; and Conspiracy to Commit Money Laundering. Remarks: Ryzhenkov is believed to reside in Russia, possibly Moscow.
Timeline of Events
🕵️
2023-03-22
Federal Arrest Warrant Issued
A federal arrest warrant was issued for Aleksandr Ryzhenkov in the United States District Court, Northern District of Texas, Dallas, Texas, charging him with conspiracy to commit fraud, intentional damage to protected computers, transmitting ransom demands, and conspiracy to commit money laundering.
Key Locations
Interactive map showing important locations related to this case
Case Information
Incident:March 22, 2023
Last Updated:October 30, 2026
Leave a comment
Comments
Case Information
Incident:March 22, 2023
Last Updated:October 30, 2026