[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fpTWFuhS8dRkg9lPAfcoswwCBiSFykM2fZ8-ED1KCuqA":3},{"article":4,"iocs":52,"watch_terms":57,"solutions":58,"lesson":61},{"id":5,"title":6,"slug":7,"summary":8,"ai_summary":9,"brief":10,"url":11,"image_url":12,"published_at":13,"ingested_at":14,"relevance_score":15,"entities":16,"category_id":31,"category":32,"article_tags":36},"5ef7e86d-3a34-448c-b249-811acf4a30d8","Armenia Detains Russian Tourist on U.S. Warrant for REvil Hacker, Lawyers Say Wrong Man","armenia-detains-russian-tourist-on-u-s-warrant-for-revil-hacker-lawyers-say-wron-58eb82","Armenia has held a Russian tourist named Aleksandr Ermakov in a detention center since June 28, on a U.S. extradition request for a REvil ransomware suspect named Aleksandr Ermakov. His wife, Maria Yurova, told REN TV that border officers pulled him out of the departure hall at Yerevan's Zvartnots airport, held up a phone with a photo of him off his VKontakte page, and walked him into a side","Armenian authorities detained Aleksandr Yuryevich Ermakov, a Russian tourist, on June 28 based on a U.S. extradition warrant intended for Aleksandr Gennadievich Ermakov, a sanctioned REvil ransomware operator linked to the Medibank breach. Ermakov's lawyers claim U.S. authorities confused the two men due to missing patronymic information in official documentation, and argue standard verification methods like fingerprints or full passport data were never used. The detained man is a former prison-service lawyer from Omsk who does not speak English and is being held on a 30-day Interpol detention order.","Armenia detains Russian tourist mistakenly identified as REvil ransomware operator Aleksandr Ermakov.","https:\u002F\u002Fthehackernews.com\u002F2026\u002F07\u002Farmenia-detains-russian-tourist-on-us.html","https:\u002F\u002Fblogger.googleusercontent.com\u002Fimg\u002Fb\u002FR29vZ2xl\u002FAVvXsEjMuThPnDJrVLJe0_WqKVz_AE9vh2H5NFoGoYlcbqF99J6sjNeWxhrrAEZKsctTKWp4TaEQKQcsdejihH7wBzgS0eaiwJ9bp04rAo2H2d2C-aydo2wrPvhAQgRsP351HM-l0P3JBoHQkwwQPqKOSIaYLKQ4Dpb_F54BjqErS5AUa5Q9RAZttEZmK0Yvqwk\u002Fs1600\u002FREvil-hacker.jpg","2026-07-17T10:53:31+00:00","2026-07-17T12:00:28.332363+00:00",7,[17,20,22,25,28],{"name":18,"type":19},"Aleksandr Gennadievich Ermakov","threat_actor",{"name":21,"type":19},"REvil\u002FSodinokibi operators",{"name":23,"type":24},"Operation Aquila","campaign",{"name":26,"type":27},"Medibank Private","product",{"name":29,"type":30},"Medibank","vendor","80544778-fabb-4dcd-aa35-17492e5dcf4f",{"id":31,"icon":33,"name":34,"slug":35},null,"Vulnerabilities","vulnerabilities",[37,42,47],{"category":38},{"id":39,"icon":33,"name":40,"slug":41},"2c8f44d4-b56e-47cf-9677-04f22c9ee78d","Identity & Access","identity-access",{"category":43},{"id":44,"icon":33,"name":45,"slug":46},"7d8b5ab8-ea0b-4ced-ae97-ec251b86993a","Ransomware","ransomware",{"category":48},{"id":49,"icon":33,"name":50,"slug":51},"e7b231c8-5f79-4465-8d38-1ef13aea5a14","Threat Intelligence","threat-intelligence",[53],{"type":54,"value":55,"context":56},"malware","REvil\u002FSodinokibi","Ransomware-as-a-service platform; sanctioned operator suspected of stealing 9.7M Medibank records",[29,26],{"controls":59,"vendors":60},[],[],{"slug":62,"title":63,"body":64,"framework_refs":65,"framework_notes":74},"identity-verification-failure-leads-to-wrong-man-detained-on-revil-warrant","Identity Verification Failure Leads to Wrong Man Detained on REvil Warrant","U.S. authorities issued an extradition warrant using incomplete identity information — omitting the patronymic name — resulting in Armenian authorities detaining an innocent Russian citizen who shares a similar name with a sanctioned REvil ransomware operator. This failure highlights the critical importance of using multi-factor identity verification (biometrics, full legal name, passport numbers, fingerprints) in legal and law enforcement processes, not just partial name matches. The mistake not only violates the rights of an innocent individual but also risks allowing the actual suspect to evade justice. Identity data integrity in law enforcement documentation is a form of data governance that, when neglected, has real-world consequences for civil liberties and operational effectiveness.",[66,67,68,69,70,71,72,73],"NIST SP 800-63-3 (Digital Identity Guidelines — Identity Proofing)","NIST IR 7298 Rev 3 (Glossary of Key Information Security Terms — Identity Assurance)","Interpol Rules on the Processing of Data (RPD), Article 12 (Accuracy of Data)","GDPR Article 5(1)(d) — Accuracy Principle for Personal Data","GDPR Article 16 — Right to Rectification","CIS Control 3: Data Protection (accurate classification and handling of sensitive identity data)","ITIL Service Transition — Change and Release Management (ensuring process integrity before operational execution)","UN Body of Principles for the Protection of All Persons under Any Form of Detention, Principle 9 (identity verification prior to detention)",{}]