The United States Justice Department has arrested and prosecuted a Ukrainian hacker with significant ties to the July cyberattack on Kaseya. The suspect, Vasinskyi, is believed to have deployed REvil ransomware strains targeting several government entities alongside additional organizations, including the Kaseya software company. Vasinskyi has been involved in ransomware operations since early 2019 and has executed over 2,000 attacks since. Furthermore, Vasinskyi has demanded well over $760 million in combined ransom payments throughout his spree, however he was only paid about $2 million from victims of his attacks. Additionally, the Justice Department revealed that $6.1 million in ransomware payments have been seized from an additional REvil member, noted as Polyanin, who remains at large. Both Vasinskyi and Polyanin have been charged on multiple counts of damages to computer systems as well as conspiracy to commit money laundering and fraud, which constitutes a prison sentence of up to 145 years each. The manhunt is still on for Polyanin, and authorities have offered up another $5 to $10 million reward for information that leads to his arrest (similar to the events unfolding with DarkSide). The United States has also officially sanctioned the Chatex cryptocurrency which is believed to facilitate financial transactions to malicious threat actors and ransomware affiliates. CTAPT is continuing to monitor this situation closely and will provide updates as needed.