According to Chainalysis, the EU sanctions Russian national Vitaly Nikolayevich Kovalev (alias Stern), calling him a senior member of the Trickbot criminal group and saying he was involved in running ransomware operations such as Ryuk and Conti. Chainalysis says that wallets linked to Stern have cumulatively received more than $300 million in ransoms and had financial dealings with multiple ransomware networks including Diavol, Karakurt, Royal, and Quantum. The EU also sanctions the developers of the information-stealing malware LummaC2, the anti-law-enforcement hosting provider Media Land LLC, personnel associated with Russia’s military intelligence agency GRU Unit 29155, and the pro-Russia hacker groups CARR and Z-Pentest.