Overview
- Japanese authorities detained a Russian national in Osaka and transferred him to German custody after receiving a request from German investigators.
- German prosecutors allege the suspect took part in a September 2024 attack on a German logistics company that encrypted data and demanded about $165,000 in Bitcoin.
- Investigators say the man is a central member who built and maintained the group’s attack systems while separate operational teams carried out intrusions.
- Reporting and official data link the group to a 2025 claim of responsibility for an Asahi Group Holdings attack and to 32 of 149 identified ransomware cases in Japan in 2025.
- The transfer followed judicial approval under Japan’s extradition law and is expected to deepen cross-border cooperation that could produce further arrests and prosecutions.