December 13, 2019

Mistaken Identity Leads U.S. to Delist ‘Evil Corp’ Companies, Reports Say

By James Disalvatore and Samuel Rubenfeld

Three Russian companies were delisted by the U.S. Treasury Department on Friday due to an apparent case of mistaken identity.

The companies -- Vertikal, OOO, Yunikom, OOO and TSAO, OOO -- had been sanctioned for their association with Denis Igorevich Gusev, a facilitator for the Russia-based cybercriminal organization Evil Corp, which was designated last week

Evil Corp is led by Maksim Yakubets, U.S. and U.K. authorities said when the U.S. charged him in two separate cases and announced a reward for information leading to his capture. The organization is accused of using malware to steal millions from banks, a school district, several companies, non-profit organizations and a religious congregation, among others.

The Treasury’s Office of Foreign Assets Control (OFAC) delisted the companies likely because they were not affiliated with the sanctioned Gusev but rather with two other men who have the same name, according to a report by the private Russian media outlet Interfax. 

The U.S. delisting comes days after Russian Foreign Minister Sergey Lavrov visited Washington, D.C., and had meetings with President Donald Trump and Secretary of State Mike Pompeo. Spokespeople for the Treasury didn’t respond to a request from Kharon for comment. 

Three other companies linked to the sanctioned Gusev by the Treasury, all based in Moscow, remain designated. One of the still-sanctioned firms, Treid-Invest, OOO, was struck from the Russian corporate registry in July 2019 due to “unreliable” information in the company’s record.

TSAO, OOO, based in Kurgan, Russia, near the border with Kazakhstan, is led by Aleksandr Lelekov, not Gusev, as Treasury had said. An individual named Denis Igorevich Gusev had been the director general of TSAO until February 2019, however. Lelekov told Russian state outlet TASS, when reached shortly after the delisting, that the news “just made my evening.” 

“I’m not involved in cyber technologies,” Lelekov said, describing the company as being involved in “high-quality [auto] body repair.” 

“I am a representative of a small business...maybe the U.S. Treasury doesn’t like it?” he said.

Vertikal and Yunikom, both based in Khanty-Mansi Autonomous Okrug, which is in Western Siberia, also had a Denis Igorevich Gusev as a director general, according to corporate records. He told Interfax that he has no connection with the sanctioned Gusev. 

“We have a different year of birth. And I have never been to Moldova. I read from foreign media that he has foreign passports - Israeli, Moldovan,” Gusev was quoted as saying.

Evil Corp, and Yakubets specifically, became the subject of numerous media reports in the wake of the U.S. sanctions and criminal charges, many of which focused on his lavish lifestyle. 

The U.S. also said at the time that Yakubets was working for the Russian Federal Security Service (FSB). And this week, the Russian service of Radio Free Europe/Radio Liberty reported that Yakubets’ father-in-law is a former officer with an elite special forces unit of the FSB, citing photographs, videos and other documents.


Kharon research

Log in for access to the latest updates and analysis on networks targeted by sanctions and sanctions-related risk. Don’t have an account? Click REQUEST AN ACCOUNT to receive information on how to get signed up.

Request an account or Log in