Skip to content

Sinclair Broadcast Hack Linked to Notorious Russian Cybergang

  • Evil Corp. said to change names to avoid 2019 U.S. sanctions
  • Broadcaster hit with new ransomware strain called Macaw
Sinclair Broadcast Group headquarters in Cockeysville, Maryland.
Sinclair Broadcast Group headquarters in Cockeysville, Maryland.Photographer: Andrew Harrer/Bloomberg

A weekend cyberattack against Sinclair Broadcast Group Inc. was linked to one of the most infamous Russian cybergangs, called Evil Corp., according to two people familiar with the attack.

The Sinclair hackers used malware called Macaw, a variant of ransomware known as WastedLocker. Both Macaw and WastedLocker were created by Evil Corp., according to the two people, who requested anonymity to discuss confidential matters. Evil Corp. was sanctioned by the U.S. Treasury Department in 2019.