Unverified50% confidenceFactExact time
Core members of major ransomware groups (such as LockBit, Conti, and BlackCat/ALPHV) are believed to be located in Russia, CIS countries, or other jurisdictions that lack extradition treaties with the United States.
1
Sources
50%
Confidence
Medium-term (~90 days)
Relevance
8/15/2026
First Seen
Valid until: 11/13/2026
Sources
白宫拟授权私企发动网络攻击：政策框架与风险解析
Related Claims
Unverified现代勒索软件团伙如LockBit、BlackCat/ALPHV、Cl0p已将备份系统破坏作为标准攻击流程的一部分61% similarUnverified2024年初美英联合行动捣毁LockBit基础设施，没收其暗网站点并公开附属成员身份61% similarUnverifiedAPT41与中国相关，Cozy Bear（APT29）与俄罗斯相关，这些组织曾多次攻击美国政府机构60% similarUnverifiedThe DNC hack during the 2016 U.S. election was ultimately attributed by security firms to Russian intelligence agencies based on malware characteristics, C2 server infrastructure, and attack timing patterns.59% similarUnverified早期勒索软件谈判服务多由网络安全事件响应公司如Coveware、Kivu Consulting兼营55% similar
Cite This Claim
Stable URI
https://kongchang.com/claim/751683API
curl https://kongchang.com/api/v1/knowledge/claims/751683MCP
get_claim(id=751683)